I am working on an application which sshes into servers and gathers information about the server such as disk and memory usage. Another task it needs to do is get file size information of certain files which may be anywhere on the server.
Because of the nature of this application, I would want to restrict the ssh user on the server to only be able to read files in /proc/* and get file sizes of certain files. I cannot give an example because the files may change on a server by server basis.
Is there any way that an ssh account could be locked down to prevent reading /proc/* and doing a du on a file that could be anywhere?
No comments:
Post a Comment