User Tools

Site Tools


wiki:security:rbash

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
wiki:security:rbash [2014/11/01 12:01]
woglinde
wiki:security:rbash [2014/11/03 13:07]
woglinde [rbash as default shell (optional)]
Line 10: Line 10:
 are serval steps so setup it up working correctly. are serval steps so setup it up working correctly.
  
-This guide is focused on a single application approach, no audio, remote/mounted dirs and printing is involved.+This guide is focused on a single application approach, no audio, remote/mounted dirs and printing are involved.
  
 ====== rbash short feature overview ====== ====== rbash short feature overview ======
Line 98: Line 98:
 There could be still problems to brake out of rbash, no one yet made a security audit of the linked x2go scripts, if they allow the execution of a real shell There could be still problems to brake out of rbash, no one yet made a security audit of the linked x2go scripts, if they allow the execution of a real shell
 via options. via options.
-====== rbash as default shell (optional)====== 
  
-If rbash is also set as the default shell via /etc/passwd or some other mechanism, the sessioncleanup skripts needs 
-to be fixed too. 
- 
-In 
-<code bash> 
-/usr/sbin/x2gocleansessions  
-</code> 
- 
-the lines with 
- 
-<code bash> 
-system("su", "@sinfo[11]", "-c" 
-</code> 
- 
-needs to be changed to 
- 
-<code bash> 
-system("su", "@sinfo[11]", "-s", "/bin/bash", "-c", 
-</code> 
wiki/security/rbash.txt ยท Last modified: 2014/11/03 13:07 by woglinde