Using Linux and Openssh:
A user can connect using ssh to a server on which his key is in the authorized_keys list. His public key is preceded by
command="command..." which forces execution of a specific command (non-shell):
command="/path/to/somescript...",no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-user-rc ssh-rsa AAAff...................
- Is there a way that the user can bypass this command?
- What about sftp? Does sftp work when using a forced command (which is not a shell)?