I have a proxy on a linux server that I want to allow a couple people to access by letting them ssh into my box with port forwarding on port 3128.

Basically I want them to use the port forwarding feature of ssh without having access to any kind of shell on my server, even rbash.

Is there a login shell that can be used, that will do nothing but keep the connection open while disallowing user input?

I thought about having their account automatically run a program that sleeps, but if the abort with ctrl-C, they get a shell prompt.

You could create a jail account and have no binaries for them to execute.

-twantrd

thanks for your response. I'm not totally clear on what a jail account is, and googling on it didnt tell me much except that it has to do with chrooting that account to a jail directory...

If you have any tips to share on how to do that, they would be much appreciated.

How/where do you launch this sleeping program ?