MVSFORUMS.com Forum Index MVSFORUMS.com
A Community of and for MVS Professionals
 
 FAQFAQ   SearchSearch   Quick Manuals   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

protection to sshd subsystem: sftp

 
Post new topic   Reply to topic   printer-friendly view    MVSFORUMS.com Forum Index -> Other Technical Topics
View previous topic :: View next topic  
Author Message
Shady
Beginner


Joined: 14 Jun 2010
Posts: 1
Topics: 1

PostPosted: Wed Sep 08, 2010 9:01 pm    Post subject: protection to sshd subsystem: sftp Reply with quote

Hi all....


My question addresses TCPIP...:
I know I can reserve a port like this..
PORT 22 TCP SSHD* SAF SSHD
where the SAF SSHD identifies the following SERVAUTH profile:
EZB.PORTACCESS.sysname.tcpname.SSHD
This would reserve the port for the SSHD* proc started by the User who have permit to the SSHD resname...

The background is the following...:
SFTP is a subsys of the SSHD. SSHD forks processes in the USS on that port (def. 22).
We want protect SFTP to some users. The problem is that the fork is independent of the users which starts SFTP request because when SSHD started the forks would be permit through the SSHD* user...

So... Perhaps someone have an idea to protect the sftp subsystem to some users like it is done by normal FTP (EZB.FTP.sysname.ftpdaemonname.PORTnnnnn)...?
It haven't to be with a port statement. Maybe someone have an other idea? Preferred with RACF options...

THX
Shady
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic   printer-friendly view    MVSFORUMS.com Forum Index -> Other Technical Topics All times are GMT - 5 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


MVSFORUMS
Powered by phpBB © 2001, 2005 phpBB Group