Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I need untrusted users to execute Ruby and Python scripts via SSH on a Fedora 17 machine with a minimal impact on system integrity and security.

A SSH wrapper will ensure only Ruby and Python executables will be run(directly).

User's home dir (as well as /tmp) are not executable(Ruby and Python run from /usr).

Need to prohibit users to create sockets.

As well as any recommendations on how to minimize the damage caused by evildoers.

Thank you.

share|improve this question

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.