[X2Go-Commits] page changed: wiki:security:rbash

wiki-admin at x2go.org wiki-admin at x2go.org
Sun Oct 26 19:49:58 CET 2014


A page in your DokuWiki was added or changed. Here are the details:

Date        : 2014/10/26 18:49
Browser     : Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/37.0.2062.120 Chrome/37.0.2062.120 Safari/537.36
IP-Address  : 78.52.193.201
Hostname    : f052193201.adsl.alicedsl.de
Old Revision: http://wiki.x2go.org/doku.php/wiki:security:rbash?rev=1414348921
New Revision: http://wiki.x2go.org/doku.php/wiki:security:rbash
Edit Summary: 
User        : woglinde

@@ -16,5 +16,19 @@
    * no calls of binaries via complete path
    * no changes on the PATH variable are allowed
  
  But be aware, if rbash detects that a executebale is a shell-script it will be run with full bash.
+ This means if you are able to access the bash executebale via the PATH-variable (remind full path like /bin/bash are not allowed),
+ you can break out the rbash.
  
+ ====== Set rbash as default shell ======
+ 
+ Depending on the user setup, there are serval options to set
the default shell for the users to rbash.
+ 
+ ===== Set the shell with Samba =====
+ For samba set the following parameter in the smb.conf:
+ <note important> template shell = /bin/rbash</note>
+ 
+ 
+ 
+ 
+ ====== secure ssh access ======



-- 
This mail was generated by DokuWiki at
http://wiki.x2go.org/



More information about the x2go-commits mailing list