Unix administration - How to enforce "user cannot invoke any programs without first logging on to the s

Author

How to enforce "user cannot invoke any programs without first logging on to the s

James

2006-06-12, 7:23 pm

Hi all,

I am writing shell scripts to enforce some security standards. One of
the rules is
"Users cannot get access to shell or invoke any other programs without
first logging
on to the system"

Does this mean
echo "mkdir /tmp/testdir" | ssh userid@anothermachine
should be prohibited?
How to enforce such kind of security rule? Is there ssh configuration I
should take a look?

Many thanks,

James