ssh-keygen -O force-command="/bin/restricted-command", or
command="/bin/restricted-command"at the beginning of an
one can force a key-based SSH connection to execute the given command and no other.
Is it possible through this mechanism (or another) to give someone a limited SSH access to a given git repository, allowing that person to
git clone user@server:myrepo.git,
pull, but nothing else?
Security note: when restricting access with
authorized_keys, you should also use the options: