lhunath 1417028161 learn openssh's "forced command" has a SSH_ORIGINAL_COMMAND that contains the command you gave ssh. THIS MUST NOT BE SHELL CODE, do not parse it as such or feed it to a shell. It is primarily useful for implementing a fully custom shell & protocol (akin to internal-sftp, ...)
lhunath 1417028409 forget
lhunath 1417028923 learn openssh's "forced command" receives an SSH_ORIGINAL_COMMAND set to the command passed to "ssh". forced-commands SHOULD NOT try to parse shell code from it. Use it only for entirely custom protocols (akin to internal-sftp) or a non-restrictive wrapper.