[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#147456: RFP: scponly -- A shell allowing only scp



On Sun, May 19, 2002 at 08:33:03PM +0200, Gurkan Sengun wrote:

> Package: wnpp
> Version: N/A; reported 2002-05-19
> Severity: wishlist
> 
> * Package name    : scponly
>   Version         : 1.3
>   Upstream Author : Joe Boyle<joe@sublimation.org>
> * URL             : http://www.sublimation.org/scponly/
> * License         : Freely Distributable
>   Description     : A shell allowing only scp

This seems to allow a lot more than just scp.

scponly.c:process_ssh_request

        /*
         *      request must be one of a few commands.
         *      some commands must be exact matches.
         *      others only require the beginning of the string to match.
         */

        if ((exact_match(request,"ls")) || 
                (NULL!=strend(request,"ls ")) || 
                (exact_match(SCP2_ARG,request)) || 
                (NULL!=strend(request,"scp ")) ||
                (exact_match(request,"pwd")) ||
                (NULL!=strend(request,"rm ")) ||
                (NULL!=strend(request,"ln ")) ||
                (NULL!=strend(request,"mv ")) ||
                (NULL!=strend(request,"chmod ")) ||
                (NULL!=strend(request,"chown ")) ||
                (NULL!=strend(request,"mkdir ")) ||
                (NULL!=strend(request,"rmdir "))) 
                        exit(exec_request(request));


-- 
 - mdz


-- 
To UNSUBSCRIBE, email to debian-wnpp-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org



Reply to: