We are in the process of setting up a hosting machine that clients will have SSH access to. We don't want them to be able to see a list of user accounts, but the problem we have run into are commands like
We could disable those, but then they could just bring their own binary. I just tried on a shared webhost, and I was the only user who showed up in
w, even though it's a large shared box and I doubt I'm the only one on.
How can I prevent users from seeing who else has logged in via SSH?