This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision Next revision Both sides next revision | ||
wiki:security:rbash [2014/10/31 21:01] woglinde [secure ssh access] |
wiki:security:rbash [2014/10/31 22:11] woglinde [Bring the path back to some scripts] |
||
---|---|---|---|
Line 49: | Line 49: | ||
fi | fi | ||
</ | </ | ||
+ | |||
+ | We set the **PATH** to a new directory, so the users can only access the commands from this dir. | ||
+ | |||
+ | ====== Link the needed programs to setup a session ====== | ||
+ | The following programs are needed to link to the new created directory. | ||
+ | |||
+ | <code bash> | ||
+ | / | ||
+ | / | ||
+ | / | ||
+ | / | ||
+ | / | ||
+ | / | ||
+ | / | ||
+ | / | ||
+ | |||
+ | mkdir / | ||
+ | cd / | ||
+ | x2goruncommand, | ||
+ | </ | ||
+ | |||
+ | Because some programs are written in perl and need fragments from the x2go-lib dir and it is searched relative, the lib-directory needs to be linked too. | ||
+ | <code bash> | ||
+ | mkdir / | ||
+ | cd / | ||
+ | </ | ||
+ | |||
+ | ====== Bring the path back to some scripts ====== | ||
+ | Because we set the PATH to / | ||
+ | |||
+ | <code bash> | ||
+ | x2gopath | ||
+ | x2goruncommand | ||
+ | x2gostartagent | ||
+ | x2goterminate-session | ||
+ | </ | ||
+ | |||
+ | After the license header add the following to all files mentioned above | ||
+ | <code bash> | ||
+ | export PATH=/ | ||
+ | </ | ||
+ | |||
+ | ====== Fix session clean up ====== |