User Tools

Site Tools


wiki:security:rbash

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
wiki:security:rbash [2014/11/01 10:00]
woglinde [Security concerns]
wiki:security:rbash [2014/11/03 13:07] (current)
woglinde [rbash as default shell (optional)]
Line 9: Line 9:
 and hard to setup correctly. Another option is the use of rbash, but with the current state of x2go-server there and hard to setup correctly. Another option is the use of rbash, but with the current state of x2go-server there
 are serval steps so setup it up working correctly. are serval steps so setup it up working correctly.
 +
 +This guide is focused on a single application approach, no audio, remote/mounted dirs and printing are involved.
  
 ====== rbash short feature overview ====== ====== rbash short feature overview ======
Line 96: Line 98:
 There could be still problems to brake out of rbash, no one yet made a security audit of the linked x2go scripts, if they allow the execution of a real shell There could be still problems to brake out of rbash, no one yet made a security audit of the linked x2go scripts, if they allow the execution of a real shell
 via options. via options.
-====== rbash as default shell (optional)====== 
  
-If rbash is also set as the default shell via /etc/passwd or some other mechanism, the sessioncleanup skripts needs 
-to be fixed too. 
- 
-In 
-<code bash> 
-/usr/sbin/x2gocleansessions  
-</code> 
- 
-the lines with 
- 
-<code bash> 
-system("su", "@sinfo[11]", "-c" 
-</code> 
- 
-needs to be changed to 
- 
-<code bash> 
-system("su", "@sinfo[11]", "-s", "/bin/bash", "-c", 
-</code> 
wiki/security/rbash.1414836044.txt.gz ยท Last modified: 2014/11/01 10:00 by woglinde