scponly provides an user shell for restricting remote access to scp and sftp.
scponly is an alternative "shell" of sorts for system administrators who would like to provide access to remote users to both read and write local files without providing any remote execution priviledges.
Functionally, it is a wrapper around the ssh suite of applications. It is typically used by creating a user whose shell is set to scponly. This user can neither login interactively nor execute commands remotely, but it can use scp and sftp to download and upload files to the computer, governed by the usual Unix file permissions.
Here are some key features of "scponly":
· logging: scponly logs time, client IP, username, and the actual request to syslog
· chroot: scponly can chroot to the user's home directory, disallowing access to the rest of the filesystem.
· sftp compatibility and sftp-logging compatibility
· WinSCP 2.0 compatibility
· rsync compatibility as a compile time option
· UNISON compatibility
· subversion compatibility
· gFTP compatibility.