[Users] ovirt-shell as ForceCommand for ssh logins

Jiri Belka jbelka at redhat.com
Wed Dec 19 10:22:44 UTC 2012


Hi,

ForceCommand for ssh session can force command for logging user.

Problem is ovirt-shell enables shell commands, that's not nice if we
would just want to give sysadmins some "restricted" cli for managing
oVirt environment.

1. Could be implemented an option to disable these shell "escapes"?

   Like '-S', so it would be 'comment="/usr/bin/ovirt-shell -S"' in
   user's authorized_keys.

2. Could be implemented an ovirt-shell command like 'set' to set
   configuration from ovirt-shell and save it(yes, user in ovirt-shell
   should not touch filesystem directly)?

   Example:

   > set username = "foo at domain"
   > save -a # save all runtime settings

3. Aliases like in lftp client?

   > alias lsvmmyvm list vms --query "name=myvm*"
   > save alias lsvmmyvm

jbelka


   



More information about the Users mailing list