Differences

This shows you the differences between two versions of the page.

--- wiki:security:rbash [2014/10/31 21:05]
woglinde [secure ssh access]
+++ wiki:security:rbash [2014/11/01 09:21]
woglinde [Fix session clean up]
@@ Line 50: / Line 50: @@
 </code>
-We set the **PATH** to a new directory, so the users can only access the commands inside this dir, as mentioned earlire
+We set the **PATH** to a new directory, so the users can only access the commands from this dir.
+====== Link the needed programs to setup a session ======
+The following programs are needed to link to the new created directory.
+<code bash>
+/usr/bin/setsid
+/usr/bin/whoami
+/usr/bin/x2goagent
+/usr/bin/x2golistsessions
+/usr/bin/x2gopath
+/usr/bin/x2goruncommand
+/usr/bin/x2gostartagent
+/usr/bin/x2goterminate-session
+mkdir /opt/rbash/bin
+cd /opt/rbash/bin && ln -s /usr/bin/{setsid,whoami,x2goagent,x2golistsessions,x2gopath,\
+x2goruncommand,x2gostartagent,x2goterminate-session} .
+</code>
+Because some programs are written in perl and need fragments from the x2go-lib dir and it is searched relative, the lib-directory needs to be linked too.
+<code bash>
+mkdir /opt/rbash/lib
+cd /opt/rbash/lib && ln -s /usr/lib/x2go .
+</code>
+====== Bring the path back to some scripts ======
+Because we set the PATH to /opt/rbash/bin some scripts needs to set it back to be functional again.
+<code bash>
+x2gopath
+x2goruncommand
+x2gostartagent
+x2goterminate-session
+</code>
+After the license header add the following to all files mentioned above
+<code bash>
+export PATH=/bin:/usr/bin:/sbin:/usr/sbin
+</code>
+====== rbash as default shell (optional)======
+If rbash is also set as the default shell via /etc/passwd or some other mechanism, the sessioncleanup skripts needs
+to be fixed too.

X2Go - everywhere@home

User Tools

Site Tools

Differences

Page Tools