Allow SSH?

[cyberoptik]

Hi,

I'm trying to decide whether or not I should allow clients access to SSH on my servers. What are your guys' views on this matter? (pros, cons, etc.)

Thanks,
Ron

 

[webgear]

For security reason don't allow this...IMHO

 

[CrazyTech]

Well Ron, typically I would advise against allowing SSH - or at the very least make it something you must request. SSH opens up the potential for abuse especially if not properly secured and monitored. Most clients won't need it/ don't know how to use it but you will get the occasional user who requests it.

 

[JMJ]

Typically if allowed you should have a seperate agreement that if the user causes any damage/downtime they are fully resposible for all losses including the losses of the other users of the server. Best to get some sort of paper signed stating this and a copy of the users photo ID aswell as a credit card or checking account which can be billed if such an instance occurs.

 

[cyberoptik]

Ok thank you all for the input.

 

[adam_uk]

jailshell the users and make sure they cant get access to system folders/files but there isnt really any need to offer this. the ammount of customers that require ssh is quite small.

 

[Zeeble]

I do not see the problem if you impose the necassery restrictions to stop the user from using it for anything bad.

 

[Mystic]

my last host enabled SSH for me, as the server was shutting down and i needed fast download of backups, i then found out, SSH let me get root access, i couldnt modify any files but i could view them, such as the passwd file, which is very bad if someone wanted to cause damage

 

[redking]

Any host that allows SSH is a good host in my book. Lots of noob resellers that don't allow SSH and don't know what they're doing. A good host can config the system to prevent users with SSH from damaging others sites. Also, check your logs periodically.