Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I need untrusted users to execute Ruby and Python scripts via SSH on a Fedora 17 machine with a minimal impact on system integrity and security.

A SSH wrapper will ensure only Ruby and Python executables will be run(directly).

User's home dir (as well as /tmp) are not executable(Ruby and Python run from /usr).

Need to prohibit users to create sockets.

As well as any recommendations on how to minimize the damage caused by evildoers.

Thank you.

share|improve this question

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.