4.6.1.2 Restricting ssh access

If you use a special account solely for Flipper on the nodes, sometimes called a headless, role or anonymous account, then it is usually desirable to use a restricted shell for that account to stop the role account being used for anonymous actions on the server.

An example restricted shell for use with Flipper can be found in ‘flippersh’. This assumes /sbin/arping is being used in your send_arp_command - if something else (or indeed nothing) is being used, change the restricted shell accordingly.