> man sshd and read the section entitled AUTHORIZED_KEYS FILE FORMAT. > Then strongly consider adding command="whatever" restrictions. you are absolutely right. I am already using it with "command", although I forgot to mention it, because I did not change this for a very long time. thanks for reminding me. M.