User Tools

Site Tools


wiki:security:rbash

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
wiki:security:rbash [2014/11/01 12:02]
woglinde
wiki:security:rbash [2014/11/03 13:07] (current)
woglinde [rbash as default shell (optional)]
Line 98: Line 98:
 There could be still problems to brake out of rbash, no one yet made a security audit of the linked x2go scripts, if they allow the execution of a real shell There could be still problems to brake out of rbash, no one yet made a security audit of the linked x2go scripts, if they allow the execution of a real shell
 via options. via options.
-====== rbash as default shell (optional)====== 
  
-If rbash is also set as the default shell via /etc/passwd or some other mechanism, the sessioncleanup skripts needs 
-to be fixed too. 
- 
-In 
-<code bash> 
-/usr/sbin/x2gocleansessions  
-</code> 
- 
-the lines with 
- 
-<code bash> 
-system("su", "@sinfo[11]", "-c" 
-</code> 
- 
-needs to be changed to 
- 
-<code bash> 
-system("su", "@sinfo[11]", "-s", "/bin/bash", "-c", 
-</code> 
wiki/security/rbash.1414843334.txt.gz ยท Last modified: 2014/11/01 12:02 by woglinde