SCP disable - SSH open

[iannis12]

Hi Folks,

I have an Open Server running Gaia R82 and some gateways. Our Security requested some hardening on the server. One question is: Can I disable scp on the server while leaving ssh open?

Thank you

[Danny · Accepted solution]

If your Gaia login shell is Clish (Default), then SCP is only possible for dedicated scponly Accounts, which need to be manually created. So yes, you can disable SCP by leaving SSH open. You just need to verify that no login account has /bin/bash or /usr/bin/scponly configured as login shell. Btw, experienced linux users can transfer files via pure SSH. You can never avoid file transfers if you allow SSH.