On Thu, 2015-09-03 at 16:42 +0100, Murray Crane wrote:

Hi all,

Hoping to crowdsource your knowledge.

In Ubuntu/Debian, is it possible to set up the www-data user with SSH access (for development purposes; read/write to the web server document root) but not "shell access" otherwise?

The SSH will be pub-key only, but I already know how to do such things (to avoid obvious "do it key only" suggestions).
Kind regards

Murray Crane
_______________________________________________
users mailing list
users@lists.bitfolk.com
https://lists.bitfolk.com/mailman/listinfo/users

You can limit a key to a particular command in .ssh/authorized_keys, like this:

command="my_command /var/www" ssh-rsa <pubkey>

Hope that helps,

M