[X2Go-Commits] page changed: wiki:security:rbash
wiki-admin at x2go.org
wiki-admin at x2go.org
Sat Nov 1 10:24:30 CET 2014
A page in your DokuWiki was added or changed. Here are the details:
Date : 2014/11/01 09:24
Browser : Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/37.0.2062.120 Chrome/37.0.2062.120 Safari/537.36
IP-Address : 79.228.221.115
Hostname : p4FE4DD73.dip0.t-ipconnect.de
Old Revision: http://wiki.x2go.org/doku.php/wiki:security:rbash?rev=1414833828
New Revision: http://wiki.x2go.org/doku.php/wiki:security:rbash
Edit Summary: [rbash short feature overview]
User : woglinde
@@ -15,9 +15,9 @@
* cd is disabled
* no redirections via > and >> are allowed
* no calls of binaries via complete path
- * no changes on the PATH variable are allowed
+ * no changes off the PATH variable are allowed
But be aware, if rbash detects that a executebale is a shell-script it will be run with full bash.
This means if you are able to access the bash executebale via the PATH-variable (remind full path like /bin/bash are not
allowed),
you can break out the rbash.
--
This mail was generated by DokuWiki at
http://wiki.x2go.org/
More information about the x2go-commits
mailing list