scponly has been removed from Debian packages. I'm using scp to pull backups from a Debian 8 server and for previous Debian servers I've set the login shell to scponly in order to restrict the backup user. What is a good replacement shell for scponly, or what configuration can be made to sshd to provide security equivalent to scponly?

  • Maybe rssh with allowscp uncommented in /etc/rssh.conf is a good solution?
    – RjOllos
    Oct 3, 2015 at 17:35
  • 1
    serverfault.com/a/507899/120438 is not quite a duplicate, but the answer might be applicable.
    – Jenny D
    Oct 4, 2015 at 9:52
  • Thanks @jenny-d. In addition to using rssh I've restricted based on hostname as described in the answer.
    – RjOllos
    Oct 5, 2015 at 20:59
  • This is discussed at serverfault.com/q/83856/107832
    – koppor
    Nov 15, 2015 at 18:51


Browse other questions tagged or ask your own question.