반품
-
제목
Is it possible to restrict SSH using restricted commands in a PSM session? -
설명
I'd like to prevent a sysadmin from invoking the ssh command during a PSM session. I've created a restricted command profile and applied it to an Access Policy. However, the result is that the session is killed before the sysadmin is able to login into the host. I thought the command profile would be applied after successful login? -
원인
Adding SSH as a command restriction is kill the SSH daemon and preventing the connection from being established.
-
해결 방안
Please format the command as 'ssh\s' (without the quotes)
Using the \s after the ssh will add a space character to the command and will stop the SSH deamon from being killed.