Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm hosting a svn+ssh repo on a OpenBSD box and wondered if it is possible to deny access to any other programs despite svnserve? The reason is that I want to restrict access to parts of the repo with path-based authentication, but having access to arbitrary shell commands defies the use of this as someone could just download the whole db.

share|improve this question

You could look into restricting the programs ran via ssh. The following shows you how to do so when using keys for authentication . I am sure with a little more looking into the man pages it can be done when using password for auth as well.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.