Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I need untrusted users to execute Ruby and Python scripts via SSH on a Fedora 17 machine with a minimal impact on system integrity and security.

A SSH wrapper will ensure only Ruby and Python executables will be run(directly).

User's home dir (as well as /tmp) are not executable(Ruby and Python run from /usr).

Need to prohibit users to create sockets.

As well as any recommendations on how to minimize the damage caused by evildoers.

Thank you.

share|improve this question
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.