linux 只允许scp 创建安全文件主机

依赖工具 rssh

yum install rssh -y

修改 /etc/rssh.conf 文件

# set the log facility. "LOG_USER" and "user" are equivalent.
logfacility = LOG_USER

# Leave these all commented out to make the default action for rssh to lock
# users out completely...

allowscp
allowsftp
#allowcvs
#allowrdist
allowrsync

更改用户登录shell

usermod　-G rsshuser  copy ### 必须要更改数组否则无法运行 rssh shell

usermod -s /usr/bin/rssh copy

测试登录

[root@cn ~]# ssh copy@10.1.x.x
Last login: Sat Aug 21 00:37:51 2021 from 10.1.x.x

Welcome to Alibaba Cloud Elastic Compute Service !


This account is restricted by rssh.
Allowed commands: scp sftp rsync

If you believe this is in error, please contact your system administrator.

测试copy

[root@c ~]# scp copy@10.1x.x.x:/tmp/test123 .
test123                                                               100%    9    24.9KB/s   00:00