Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

extension ssh permission too well done #8

Open
EvansPM opened this issue Sep 7, 2020 · 0 comments
Open

extension ssh permission too well done #8

EvansPM opened this issue Sep 7, 2020 · 0 comments
Labels
help wanted Extra attention is needed

Comments

@EvansPM
Copy link

EvansPM commented Sep 7, 2020

First of all thank you for this great extension!

I use a restricted user created with sudo useradd -s /bin/rbash baye.
with Putty I'm not able to use com commands "ls", but through the extension I can run "ls" which means my restriction is not really complete or your extension managed to bypass it.

I restarted the server, reinstalled the app in case of old connection but it doesn't change anything.

In order to do an investigation I would like to have an idea how you managed to run these commands even in a restricted account.

Edit:
I finally understood that there are two types of restriction: shell restriction and ssh restriction, to restrict it from ssh I used this very good script : https://github.com/RaymiiOrg/boa-diminish-restricted-shell

@EvansPM EvansPM changed the title extension permission too well done extension ssh permission too well done Sep 7, 2020
@EvansPM EvansPM closed this as completed Sep 7, 2020
@EvansPM EvansPM reopened this Sep 7, 2020
@EvansPM EvansPM closed this as completed Sep 7, 2020
@aluis-rcastro aluis-rcastro added the help wanted Extra attention is needed label Sep 12, 2020
@aluis-rcastro aluis-rcastro reopened this Apr 25, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
help wanted Extra attention is needed
Projects
None yet
Development

No branches or pull requests

2 participants