scponly has been removed from Debian packages. I'm using scp to pull backups from a Debian 8 server and for previous Debian servers I've set the login shell to scponly
in order to restrict the backup user. What is a good replacement shell for scponly, or what configuration can be made to sshd to provide security equivalent to scponly?
allowscp
uncommented in/etc/rssh.conf
is a good solution?rssh
I've restricted based on hostname as described in the answer.