rssh-discuss Mailing List for rssh (Page 34)
Brought to you by:
xystrus
You can subscribe to this list here.
2003 |
Jan
|
Feb
|
Mar
|
Apr
|
May
(4) |
Jun
(1) |
Jul
(15) |
Aug
(33) |
Sep
(5) |
Oct
(15) |
Nov
(8) |
Dec
(4) |
---|---|---|---|---|---|---|---|---|---|---|---|---|
2004 |
Jan
(5) |
Feb
|
Mar
(5) |
Apr
(4) |
May
(4) |
Jun
(15) |
Jul
(9) |
Aug
(11) |
Sep
(5) |
Oct
(2) |
Nov
|
Dec
(6) |
2005 |
Jan
(8) |
Feb
(6) |
Mar
(43) |
Apr
(2) |
May
(5) |
Jun
(6) |
Jul
(12) |
Aug
(22) |
Sep
(5) |
Oct
(7) |
Nov
(15) |
Dec
(5) |
2006 |
Jan
(60) |
Feb
(7) |
Mar
(12) |
Apr
(7) |
May
(5) |
Jun
(14) |
Jul
(19) |
Aug
(21) |
Sep
(16) |
Oct
(2) |
Nov
(15) |
Dec
(3) |
2007 |
Jan
|
Feb
|
Mar
|
Apr
(24) |
May
|
Jun
(26) |
Jul
(12) |
Aug
(1) |
Sep
(7) |
Oct
(2) |
Nov
|
Dec
(1) |
2008 |
Jan
(4) |
Feb
(6) |
Mar
(4) |
Apr
(4) |
May
(5) |
Jun
(4) |
Jul
(4) |
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
2009 |
Jan
|
Feb
(27) |
Mar
(20) |
Apr
(8) |
May
(1) |
Jun
(1) |
Jul
|
Aug
(3) |
Sep
(2) |
Oct
(1) |
Nov
|
Dec
|
2010 |
Jan
(3) |
Feb
(1) |
Mar
(3) |
Apr
|
May
|
Jun
(4) |
Jul
(7) |
Aug
(6) |
Sep
(7) |
Oct
(1) |
Nov
|
Dec
|
2011 |
Jan
|
Feb
(5) |
Mar
(5) |
Apr
(16) |
May
|
Jun
(6) |
Jul
(20) |
Aug
(10) |
Sep
(4) |
Oct
|
Nov
|
Dec
(7) |
2012 |
Jan
(5) |
Feb
|
Mar
(9) |
Apr
|
May
(6) |
Jun
(3) |
Jul
(1) |
Aug
|
Sep
|
Oct
(1) |
Nov
(5) |
Dec
(6) |
2013 |
Jan
|
Feb
|
Mar
(5) |
Apr
|
May
|
Jun
|
Jul
(2) |
Aug
(2) |
Sep
(3) |
Oct
(1) |
Nov
(1) |
Dec
|
2014 |
Jan
(5) |
Feb
|
Mar
|
Apr
(1) |
May
|
Jun
|
Jul
|
Aug
(7) |
Sep
|
Oct
|
Nov
|
Dec
|
2015 |
Jan
|
Feb
|
Mar
|
Apr
(4) |
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
(2) |
Nov
(7) |
Dec
|
2016 |
Jan
|
Feb
|
Mar
(4) |
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
(11) |
Nov
|
Dec
|
2018 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
(2) |
2019 |
Jan
(8) |
Feb
(17) |
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
(3) |
Dec
|
2020 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
(1) |
Dec
|
2021 |
Jan
(4) |
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
2022 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
(1) |
Nov
|
Dec
|
From: Melissa Y. <the...@ya...> - 2003-08-06 15:52:54
|
1) The user entry is one line. Two passwd files are the same. 2) I will try to configure the log. 3) Here is what I got when I run rssh directly: # rssh This account is restricted. If you believe this is in error, please contact your system administrator. # Is it fine? No core. Does this mean rssh is functioning? On the client side, I have tried both psftp and wu_ftp, but still no luck. Thank you! Melissa __________________________________ Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software http://sitebuilder.yahoo.com |
From: Derek M. <co...@pi...> - 2003-08-06 15:32:32
|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Wed, Aug 06, 2003 at 07:47:33AM -0700, Melissa Young wrote: > Dear Derek, > > Thank you so much for your messages. Sorry about my > complaint. The documentation should be good enough by > your explanation. Ok, good. Thanks. :) > Here are my configuration files: > > 1) #grep tester /home/chroot/etc/passwd > tester:x:212:4:sftp > tester:/home/chroot/home/tester:/usr/local/bin/rssh I think this was supposed to be one line, right? Like this: tester:x:212:4:sftp tester:/home/chroot/home/tester:/usr/local/bin/rssh Also, more imortantly, the entry is the same in /etc/passwd, right? The passwd file entries in the chroot jail are only used to get the username and userid once inside the jail. The other stuff is only used BEFORE that, so it must be correct in /etc/passwd. > 2) #cat /usr/local/etc/rssh.conf > allowsftp > umask = 022 > chrootpath=/home/chroot > user=tester:011:02:/home/chroot # sftp with chroot This looks fine. > 3) # find /home/chroot > /home/chroot [SNIP] Unfortunately, I really have no way to verify if your chroot jail is set up correctly, though I don't see anything obvious missing. I don't have access to a Sun box. This is why I state in the documentation (the file CHROOT) that I can not provide support for setting up chroot jails. Sorry. But like I said, I don't see anything obvious missing, EXCEPT that you have not configured syslogd on your system to listen to an additional socket in /home/chroot/dev/log. But then it may not be possible on Solaris 2.5.1 either, I don't know. See the man page for syslogd(8) to verify... If you can do it, I suggest that you do so; it may help explain what is going on. Then look in your logs for error messages from rssh. I really think the most likely explanation is that rssh is crashing, because you changed vsnprintf() to vsprintf(). And as I said, if that's the case, there's nothing I can do about it. Best I could do would be to write my own implementation of vsnprintf, or copy one from someone's C library, but I'm not going to do that. It's too much effort. All I can suggest at that point is to upgrade to Solaris 2.6 or later, or find external libraries which have the *nprintf functions to link against... Incidentally, you could try running rssh directly, and see what happens. If it dumps core, then you can be sure this is the problem. If it doesn't, it may still be; hard to tell. You might also try running it through a debugger, if you know how to do that. Look through your system logs for error messages. That may turn up something useful. - -- Derek D. Martin http://www.pizzashack.org/ GPG Key ID: 0xDFBEAD02 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE/MR91djdlQoHP510RAjfxAJ0Rvkf9Sx2+qKVY1cqYHF4jz6OjPgCeL7Wt 3ea9evNwFr62hZLwZ7eWXW4= =9a4E -----END PGP SIGNATURE----- |
From: Melissa Y. <the...@ya...> - 2003-08-06 14:48:21
|
Dear Derek, Thank you so much for your messages. Sorry about my complaint. The documentation should be good enough by your explanation. Here are my configuration files: 1) #grep tester /home/chroot/etc/passwd tester:x:212:4:sftp tester:/home/chroot/home/tester:/usr/local/bin/rssh 2) #cat /usr/local/etc/rssh.conf allowsftp umask = 022 chrootpath=/home/chroot user=tester:011:02:/home/chroot # sftp with chroot 3) # find /home/chroot /home/chroot /home/chroot/usr /home/chroot/usr/local /home/chroot/usr/local/bin /home/chroot/usr/local/bin/sftp /home/chroot/usr/local/bin/rssh /home/chroot/usr/local/libexec /home/chroot/usr/local/libexec/sftp-server /home/chroot/usr/local/libexec/rssh_chroot_helper /home/chroot/usr/local/lib /home/chroot/usr/local/lib/libz.so /home/chroot/usr/local/lib/libcrypto.so.0.9.7 /home/chroot/usr/local/lib/libgcc_s.so.1 /home/chroot/usr/lib /home/chroot/usr/lib/libposix4.so.1 /home/chroot/usr/lib/libsocket.so.1 /home/chroot/usr/lib/libnsl.so.1 /home/chroot/usr/lib/libc.so.1 /home/chroot/usr/lib/libdl.so.1 /home/chroot/usr/lib/libintl.so.1 /home/chroot/usr/lib/libmp.so.1 /home/chroot/usr/lib/libw.so.1 /home/chroot/usr/lib/ld.so.1 /home/chroot/etc /home/chroot/etc/passwd /home/chroot/etc/group /home/chroot/etc/shadow /home/chroot/home /home/chroot/home/tester (I actually copied all the library files from /usr/lib and /usr/local/lib to the chroot locations. Not listed above) Would you please help me check if there are anything wrong with these settings? I only need sftp, but always got the error message: "Fatal: unable to initialise SFTP: could not connect" Without using rssh, other users are working fine with the sftp. Thank you very much !! Melissa __________________________________ Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software http://sitebuilder.yahoo.com |
From: Melissa Y. <the...@ya...> - 2003-08-05 19:57:03
|
Here are what I have done. 1) Without rssh, the OpenSSH is working. 2) Added rssh into the user shell in password file 3) Made /home/chroot and copied these files 4) Edited the rssh.conf 5) run rssh # cat rssh.conf: allowsftp umask = 022 chrootpath=/home/chroot user=tester:011:02:/home/chroot # sftp with chroot but when I try to connect, I got: Fatal: unable to initialise SFTP: could not connect What is wrong? The ftp client I use is psftp. Thanks. Melissa __________________________________ Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software http://sitebuilder.yahoo.com |
From: Melissa Y. <the...@ya...> - 2003-08-05 19:38:36
|
I have been reading them, but they are not systematical. Many things can not be found. For example, in rssh.conf: #user=rudy:011:10:"/usr/local/chroot dir" # sftp with chroot What does this "dir" mean here? If the writer gives an example, it would be much chear. After I setup the chroot, what do I need to do to make it work? No answers in these files. Maybe I am slow here, but if a programmer assumes that the users can figure out everything by themselves, he/she is not that good either. By the way, I did setup chroot for BIND9 DNS without any problem. Thanks. Melissa --- Mike Nguyen <mi...@ti...> wrote: > > There are several places which provide explanations > on setting up a chroot > environment (and also per-user restrictions) to be > used with rssh. > > - The CHROOT file in the source package. > > - man rssh.conf > > - The default rssh.conf file (located in > /usr/local/etc/rssh.conf, by > default) > > Have you taken a look at those yet? > > Regards, > > - Mike Nguyen > - mailto:mi...@ti... > > On Tue, 5 Aug 2003, Melissa Young wrote: > > > Hi, > > > > I am a new user of rssh. > > I have just installed rssh on Solaris. > > I like to setup sftp user restriction. > > > > I have found no documentations, only some basic > short > > man pages. > > > > Where can I find configuraiton documentations (for > > Solaris better)? > > > > Mr. Derek Martin, please forgive me: not all > people > > are as smart as you are- at least I am not :( You > > wrote an excellent program with poor > documentation. > > > > Please help. > > Thanks. > > Melissa Young > > > > > > > > __________________________________ > > Do you Yahoo!? > > Yahoo! SiteBuilder - Free, easy-to-use web site > design software > > http://sitebuilder.yahoo.com > > > > > > > ------------------------------------------------------- > > This SF.Net email sponsored by: Free pre-built > ASP.NET sites including > > Data Reports, E-commerce, Portals, and Forums are > available now. > > Download today and enter to win an XBOX or Visual > Studio .NET. > > > http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 > > _______________________________________________ > > rssh-discuss mailing list > > rss...@li... > > > https://lists.sourceforge.net/lists/listinfo/rssh-discuss > > > > > > > ------------------------------------------------------- > This SF.Net email sponsored by: Free pre-built > ASP.NET sites including > Data Reports, E-commerce, Portals, and Forums are > available now. > Download today and enter to win an XBOX or Visual > Studio .NET. > http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 > _______________________________________________ > rssh-discuss mailing list > rss...@li... > https://lists.sourceforge.net/lists/listinfo/rssh-discuss __________________________________ Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software http://sitebuilder.yahoo.com |
From: Mike N. <mi...@ti...> - 2003-08-05 18:35:50
|
There are several places which provide explanations on setting up a chroot environment (and also per-user restrictions) to be used with rssh. - The CHROOT file in the source package. - man rssh.conf - The default rssh.conf file (located in /usr/local/etc/rssh.conf, by default) Have you taken a look at those yet? Regards, - Mike Nguyen - mailto:mi...@ti... On Tue, 5 Aug 2003, Melissa Young wrote: > Hi, > > I am a new user of rssh. > I have just installed rssh on Solaris. > I like to setup sftp user restriction. > > I have found no documentations, only some basic short > man pages. > > Where can I find configuraiton documentations (for > Solaris better)? > > Mr. Derek Martin, please forgive me: not all people > are as smart as you are- at least I am not :( You > wrote an excellent program with poor documentation. > > Please help. > Thanks. > Melissa Young > > > > __________________________________ > Do you Yahoo!? > Yahoo! SiteBuilder - Free, easy-to-use web site design software > http://sitebuilder.yahoo.com > > > ------------------------------------------------------- > This SF.Net email sponsored by: Free pre-built ASP.NET sites including > Data Reports, E-commerce, Portals, and Forums are available now. > Download today and enter to win an XBOX or Visual Studio .NET. > http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 > _______________________________________________ > rssh-discuss mailing list > rss...@li... > https://lists.sourceforge.net/lists/listinfo/rssh-discuss > > |
From: Melissa Y. <the...@ya...> - 2003-08-05 17:48:10
|
Hi, I am a new user of rssh. I have just installed rssh on Solaris. I like to setup sftp user restriction. I have found no documentations, only some basic short man pages. Where can I find configuraiton documentations (for Solaris better)? Mr. Derek Martin, please forgive me: not all people are as smart as you are- at least I am not :( You wrote an excellent program with poor documentation. Please help. Thanks. Melissa Young __________________________________ Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software http://sitebuilder.yahoo.com |
From: Melissa Y. <the...@ya...> - 2003-08-05 17:39:52
|
Hi, Michael Schulte's message gave me the best inspiration. I edited the files 'main.c' and 'log.c' to replace all 'snprintf' and 'vsnprintf' with something else such as fprint. In other words, I disabled the calls to the two unexisting functions 'snprintf' and 'vsnprintf'. Then it works. I compiled the program without getting other error messages. Melissa Young __________________________________ Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software http://sitebuilder.yahoo.com |
From: Shapiro, D. <dav...@bt...> - 2003-08-04 15:28:48
|
Try gmake. -----Original Message----- From: Derek Martin [mailto:co...@pi...] Sent: Monday, August 04, 2003 11:24 AM To: rss...@li... Subject: Re: rssh compiling problem on Solaris -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Mon, Aug 04, 2003 at 07:48:24AM -0700, Melissa Young wrote: > Hi, Hi Melissa, > I got the following error message, and don't quite > understand what it means and how to solve it. It > should be a library problem. It's definitely a library problem... > Undefined first referenced > symbol in file > snprintf main.o > vsnprintf log.o > ld: fatal: Symbol referencing errors. No output > written to rssh The linker can't find the functions snprintf and vsnprintf. I'm not sure why this might be. It could be that Solaris 2.5 doesn't have those functions in its C libraries, but I didn't think it was /that/ old... Unfortunately I really don't have any suggestions as to how to fix the problem. Could you post the output of configure? That might prove helpful (or might not). - -- Derek D. Martin http://www.pizzashack.org/ GPG Key ID: 0xDFBEAD02 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE/LnqodjdlQoHP510RAiQVAJwKrYT0D+BSPStgXfRo8iqNMLp1NwCbBwec nYofK9QNq2JdfnMTu6kCrVs= =+JBP -----END PGP SIGNATURE----- ------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 _______________________________________________ rssh-discuss mailing list rss...@li... https://lists.sourceforge.net/lists/listinfo/rssh-discuss |
From: Melissa Y. <the...@ya...> - 2003-08-04 14:48:25
|
Hi, I am trying to compile rssh on this Solaris 2.5 system -- yes, Solaris 2.5 :( I got the following error message, and don't quite understand what it means and how to solve it. It should be a library problem. Anyone can give me a hint? Thank you!!(will summarise if get the right answer) Melissa Young System Admin //////////////////////////////////////////////////// server:/temp/rssh/rssh-2.1.1# make make all-am gcc -c -DHAVE_CONFIG_H -DPATH_RSSH_CONFIG=\"/usr/local/etc/rssh.conf\" -DPATH_CHROOT_HELPER=\"/usr/local/libexec/rssh_chroot_helper\" -g -O2 main.c gcc -g -O2 -o rssh rsshconf.o log.o util.o main.o -lgen Undefined first referenced symbol in file snprintf main.o vsnprintf log.o ld: fatal: Symbol referencing errors. No output written to rssh collect2: ld returned 1 exit status *** Error code 1 make: Fatal error: Command failed for target `rssh' Current working directory /temp/rssh/rssh-2.1.1 *** Error code 1 make: Fatal error: Command failed for target `all' __________________________________ Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software http://sitebuilder.yahoo.com |
From: Mr. M. L. <mai...@ya...> - 2003-07-27 20:55:56
|
Someone got a little too many swirlies when he was in junior high, huh? --- Derek Martin <co...@pi...> wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > On Sun, Jul 27, 2003 at 10:47:18AM -0700, Mr. > Mailing List wrote: > > then that means you responded to a single post > twice. > > Apparently, you can't count either. This is now the > fourth post I've > replied to. Where I said, "I've now explained it > twice" was in my > second post -- the firt time I explained it was in > the first post, and > the second time I explained it was earlier in that > same (second) post. > > > you really should stop being so rude to users. > > I started out civil, as I always do. And on the > whole, despite not > making any attempt to hide my irritation, I would > still not categorize > my manner as rude, up to this point. I lose > patience with people who > a) don't read documentation and b) can't understand > written English, > when clearly it is their primary language. You seem > to fall into at > least one of those categories, though I will not > hazzard a guess as to > which one(s). I lose patience VERY quickly with > people who keep > asking the same questions, which I have already > answered, as you have > done. I make no appologies for that. > > But since you're still asking the same question, > I'll explain it one > more time as clearly as I possibly can, before I > start ignoring your > messages entirely: > > > using lufs, i'm having similar problems, despite > enablig sftp and > > scp > > This is because (as I have determined after looking > at the LUFS > website for 30 seconds) just like winscp, lufs uses > ssh to do what it > does, and needs to be able to run commands through > ssh on the remote > host (no doubt to get file details, etc.). The > precise and entire > point of rssh is to prevent exactly that, with > exactly two possible > exceptions: scp and sftp-server. These are the only > two commands > which can possibly work, and then only if you > configure rssh to let > them. > > It does not work with LUFS for precisely the same > reasons winscp does > not work. Therefore, it will not work, and will > NEVER work. It will > not work with WinSCP, nor with LUFS, nor with any > other software that > uses ssh to run commands on the remote host. Not > now, not ever. So > please go away now. > > - -- > Derek D. Martin > http://www.pizzashack.org/ > GPG Key ID: 0xDFBEAD02 > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.2.1 (GNU/Linux) > > iD8DBQE/JBymdjdlQoHP510RAgPLAJ4m56OiQojZPebG0W2FWjvfr7RokQCgrMHG > YjMOHaQRD+lvOxWPbbkm8O8= > =oAe3 > -----END PGP SIGNATURE----- > > > ------------------------------------------------------- > This SF.Net email sponsored by: Free pre-built > ASP.NET sites including > Data Reports, E-commerce, Portals, and Forums are > available now. > Download today and enter to win an XBOX or Visual > Studio .NET. > http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 > _______________________________________________ > rssh-discuss mailing list > rss...@li... > https://lists.sourceforge.net/lists/listinfo/rssh-discuss __________________________________ Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software http://sitebuilder.yahoo.com |
From: Mr. M. L. <mai...@ya...> - 2003-07-27 17:47:20
|
then that means you responded to a single post twice. you really should stop being so rude to users. using lufs, i'm having similar problems, despite enablig sftp and scp here is fstab entry. none /share lufs noauto,user,nosuid,fs=sshfs,host=myhost,username=share,fmode=444.dmode=555 mount /share/ could not mount filesystem! this works if shell is bash, but not rssh. i'm making this abundently clear, i'm not using winscp in this case. that was only on another machine, and rssh is still giving me problems. so please stop the condescending attitude. --- Derek Martin <co...@pi...> wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > On Sat, Jul 26, 2003 at 10:44:58AM -0700, Mr. > Mailing List wrote: > > wow, calm down, i edited rssh.conf and enabled > sftp, > > which i'll try when i get back to work monday. > > If it doesn't work, I can't help you. I hope that's > abundantly clear > by now. > > > as far as telling me anything twice, that was my > first > > post you responded to. > > No it wasn't. See the archives, specifically here: > > > http://sourceforge.net/mailarchive/forum.php?thread_id=2816504&forum_id=33294 > > In fact, I posted this message twice, because the > first time I had > x-no-archive set, so it did not make it to the > archives. > > > --- Derek Martin <co...@pi...> wrote: > > > -----BEGIN PGP SIGNED MESSAGE----- > > > Hash: SHA1 > > > > > > On Thu, Jul 24, 2003 at 11:11:01AM -0700, Mr. > > > Mailing List wrote: > > > > I have it to where it uses rssh as shell, and > when > > > i > > > > try to locally su user, it says you can only > scp > > > with > > > > this account. > > > > > > Right, because you've only allowed scp. > > > > > > > so with winscp, i tried both scp and sftp, but > it > > > > still does not work. > > > > > > As I said, winscp will not work with rssh and > scp. > > > You might be able > > > to get it to work with sftp, but you'll have to > > > allow the user to use > > > sftp... > > > > > > > with scp protocol, it says... > > > > Connection has been unexpectedly closed. > Server > > > sent > > > > command exit status 0. > > > > > > It should be clear why this is happening, as > I've > > > explained it twice > > > now. > > > > > > > with sftp protocol, it says... > > > > > > > > Connection has been unexpectedly closed. > Server > > > sent > > > > command exit status 0. > > > > > > And this is because you're not allowing sftp. > > > Either you have still > > > not read the documentation, or you have failed > to > > > understand it. I > > > can't explain it any clearer here, than I did > there. > > > > > > I can't provide any more help with this. As I > have > > > said, using rssh > > > with WinSCP IS UNSUPPORTED. Look at the faq for > > > alternatives. > > - -- > Derek D. Martin > http://www.pizzashack.org/ > GPG Key ID: 0xDFBEAD02 > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.2.1 (GNU/Linux) > > iD8DBQE/IsIHdjdlQoHP510RAtHmAJ4pvswoAh5/sC2A3wyxFCCJJ1UTlwCfYcS9 > AOBQd7sPU2m2vK+AN3z2iZo= > =2k4y > -----END PGP SIGNATURE----- > > > ------------------------------------------------------- > This SF.Net email sponsored by: Free pre-built > ASP.NET sites including > Data Reports, E-commerce, Portals, and Forums are > available now. > Download today and enter to win an XBOX or Visual > Studio .NET. > http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 > _______________________________________________ > rssh-discuss mailing list > rss...@li... > https://lists.sourceforge.net/lists/listinfo/rssh-discuss __________________________________ Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software http://sitebuilder.yahoo.com |
From: Derek M. <co...@pi...> - 2003-07-26 18:02:17
|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Sat, Jul 26, 2003 at 10:44:58AM -0700, Mr. Mailing List wrote: > wow, calm down, i edited rssh.conf and enabled sftp, > which i'll try when i get back to work monday. If it doesn't work, I can't help you. I hope that's abundantly clear by now. > as far as telling me anything twice, that was my first > post you responded to. No it wasn't. See the archives, specifically here: http://sourceforge.net/mailarchive/forum.php?thread_id=2816504&forum_id=33294 In fact, I posted this message twice, because the first time I had x-no-archive set, so it did not make it to the archives. > --- Derek Martin <co...@pi...> wrote: > > -----BEGIN PGP SIGNED MESSAGE----- > > Hash: SHA1 > > > > On Thu, Jul 24, 2003 at 11:11:01AM -0700, Mr. > > Mailing List wrote: > > > I have it to where it uses rssh as shell, and when > > i > > > try to locally su user, it says you can only scp > > with > > > this account. > > > > Right, because you've only allowed scp. > > > > > so with winscp, i tried both scp and sftp, but it > > > still does not work. > > > > As I said, winscp will not work with rssh and scp. > > You might be able > > to get it to work with sftp, but you'll have to > > allow the user to use > > sftp... > > > > > with scp protocol, it says... > > > Connection has been unexpectedly closed. Server > > sent > > > command exit status 0. > > > > It should be clear why this is happening, as I've > > explained it twice > > now. > > > > > with sftp protocol, it says... > > > > > > Connection has been unexpectedly closed. Server > > sent > > > command exit status 0. > > > > And this is because you're not allowing sftp. > > Either you have still > > not read the documentation, or you have failed to > > understand it. I > > can't explain it any clearer here, than I did there. > > > > I can't provide any more help with this. As I have > > said, using rssh > > with WinSCP IS UNSUPPORTED. Look at the faq for > > alternatives. - -- Derek D. Martin http://www.pizzashack.org/ GPG Key ID: 0xDFBEAD02 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE/IsIHdjdlQoHP510RAtHmAJ4pvswoAh5/sC2A3wyxFCCJJ1UTlwCfYcS9 AOBQd7sPU2m2vK+AN3z2iZo= =2k4y -----END PGP SIGNATURE----- |
From: Mr. M. L. <mai...@ya...> - 2003-07-26 17:44:58
|
wow, calm down, i edited rssh.conf and enabled sftp, which i'll try when i get back to work monday. as far as telling me anything twice, that was my first post you responded to. --- Derek Martin <co...@pi...> wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > On Thu, Jul 24, 2003 at 11:11:01AM -0700, Mr. > Mailing List wrote: > > I have it to where it uses rssh as shell, and when > i > > try to locally su user, it says you can only scp > with > > this account. > > Right, because you've only allowed scp. > > > so with winscp, i tried both scp and sftp, but it > > still does not work. > > As I said, winscp will not work with rssh and scp. > You might be able > to get it to work with sftp, but you'll have to > allow the user to use > sftp... > > > with scp protocol, it says... > > Connection has been unexpectedly closed. Server > sent > > command exit status 0. > > It should be clear why this is happening, as I've > explained it twice > now. > > > with sftp protocol, it says... > > > > Connection has been unexpectedly closed. Server > sent > > command exit status 0. > > And this is because you're not allowing sftp. > Either you have still > not read the documentation, or you have failed to > understand it. I > can't explain it any clearer here, than I did there. > > I can't provide any more help with this. As I have > said, using rssh > with WinSCP IS UNSUPPORTED. Look at the faq for > alternatives. > > - -- > Derek D. Martin > http://www.pizzashack.org/ > GPG Key ID: 0xDFBEAD02 > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.2.1 (GNU/Linux) > > iD8DBQE/ICRXdjdlQoHP510RAqxuAJ4660OJn11sWQp2Asa02iicDvl33QCfRieH > QnVyUb3OfUqU8iBQSJjHQcc= > =HAdR > -----END PGP SIGNATURE----- > > > ------------------------------------------------------- > This SF.Net email sponsored by: Free pre-built > ASP.NET sites including > Data Reports, E-commerce, Portals, and Forums are > available now. > Download today and enter to win an XBOX or Visual > Studio .NET. > http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 > _______________________________________________ > rssh-discuss mailing list > rss...@li... > https://lists.sourceforge.net/lists/listinfo/rssh-discuss __________________________________ Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software http://sitebuilder.yahoo.com |
From: Mr. M. L. <mai...@ya...> - 2003-07-24 18:11:02
|
I have it to where it uses rssh as shell, and when i try to locally su user, it says you can only scp with this account. so with winscp, i tried both scp and sftp, but it still does not work. with scp protocol, it says... Connection has been unexpectedly closed. Server sent command exit status 0. with sftp protocol, it says... Connection has been unexpectedly closed. Server sent command exit status 0. and that it couldn't initialize sftp protocol. --- Derek Martin <co...@pi...> wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > On Tue, Jul 22, 2003 at 08:57:31AM -0700, Mr. > Mailing List wrote: > > I'm trying to use winscp, which basically does > > everything through scp. I also use sshfs from > lufs. > > WinSCP does not work with rssh and scp. This is in > the FAQ, which I > recommend you read. Newer versions of WinSCP do > support sftp, which > should work, or so I am told... I have made no > effort to verify that. > To work with scp, WinSCP needs to be able to run a > number of other > commands, e.g. ls. However, rssh will not allow ls > to be run, so > WinSCP will not be able to get a list of files. > Unless you use a > recent version, which will require sftp. I don't > know the details of > making that work, nor do I care to... Check the > documentation for > WinSCP. > > > What I am wanting to do is to restrict user share > to > > /share, and possibly /share/html which symlinks to > > /var/www/html(of which he is part of the group to > > access both). > > You can not do this; it is impossible. The only way > to "restrict" a > user is to chroot that user's processes into some > directory. When you > chroot, the root of the file system becomes the > directory you specify, > for the chrooted process and all of its children. > So if you chroot > them to /share, then /share becomes /, and since > /var/www/html is not > under /share, it will be inaccessable, as if it did > not exist at all. > There is no way, via symlink or otherwise, to make > it accessible, > other than to actually move it somewhere under > /share. > > Please read the documentation, specifically the file > CHROOT in the > source distribution (or > /usr/share/doc/rssh-2.1.1/CHROOT if you > installed from RPM), and also the manpage for > chroot(2). > > > I did usermod and changed his shell to rssh, and I > had > > this in the config file? > > > # if you DO NOT want to chroot users, LEAVE THIS > > COMMENTED OUT. > > # Quotes not required unless path contains a > space... > > chrootpath="/share dir" > > You are chrooting all users to the directory "/share > dir", which based > on your description, does not exist. You want to > change it to > "/share", and make sure you've set up a proper > chroot jail under that > directory. > > However, based on what you've said, I don't think > that's really what > you want, and I don't think it's possible for you to > get what you > want. That is, unless you can be satisfied with > limiting them to > /share (and everything under it, of course) only. > > - -- > Derek D. Martin > http://www.pizzashack.org/ > GPG Key ID: 0xDFBEAD02 > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.2.1 (GNU/Linux) > > iD8DBQE/HWcadjdlQoHP510RAtEeAKCR/3lscyGvT5lNGTgBIsi31ukEeACdFGNV > +s4J+V/YtWUOQyCAcgtW5BA= > =NDLa > -----END PGP SIGNATURE----- > > > ------------------------------------------------------- > This SF.net email is sponsored by: VM Ware > With VMware you can run multiple operating systems > on a single machine. > WITHOUT REBOOTING! Mix Linux / Windows / Novell > virtual machines at the > same time. Free trial click here: > http://www.vmware.com/wl/offer/345/0 > _______________________________________________ > rssh-discuss mailing list > rss...@li... > https://lists.sourceforge.net/lists/listinfo/rssh-discuss __________________________________ Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software http://sitebuilder.yahoo.com |
From: Derek M. <co...@pi...> - 2003-07-22 16:38:52
|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Tue, Jul 22, 2003 at 08:57:31AM -0700, Mr. Mailing List wrote: > I'm trying to use winscp, which basically does > everything through scp. I also use sshfs from lufs. WinSCP does not work with rssh and scp. This is in the FAQ, which I recommend you read. Newer versions of WinSCP do support sftp, which should work, or so I am told... I have made no effort to verify that. To work with scp, WinSCP needs to be able to run a number of other commands, e.g. ls. However, rssh will not allow ls to be run, so WinSCP will not be able to get a list of files. Unless you use a recent version, which will require sftp. I don't know the details of making that work, nor do I care to... Check the documentation for WinSCP. > What I am wanting to do is to restrict user share to > /share, and possibly /share/html which symlinks to > /var/www/html(of which he is part of the group to > access both). You can not do this; it is impossible. The only way to "restrict" a user is to chroot that user's processes into some directory. When you chroot, the root of the file system becomes the directory you specify, for the chrooted process and all of its children. So if you chroot them to /share, then /share becomes /, and since /var/www/html is not under /share, it will be inaccessable, as if it did not exist at all. There is no way, via symlink or otherwise, to make it accessible, other than to actually move it somewhere under /share. Please read the documentation, specifically the file CHROOT in the source distribution (or /usr/share/doc/rssh-2.1.1/CHROOT if you installed from RPM), and also the manpage for chroot(2). > I did usermod and changed his shell to rssh, and I had > this in the config file? > # if you DO NOT want to chroot users, LEAVE THIS > COMMENTED OUT. > # Quotes not required unless path contains a space... > chrootpath="/share dir" You are chrooting all users to the directory "/share dir", which based on your description, does not exist. You want to change it to "/share", and make sure you've set up a proper chroot jail under that directory. However, based on what you've said, I don't think that's really what you want, and I don't think it's possible for you to get what you want. That is, unless you can be satisfied with limiting them to /share (and everything under it, of course) only. - -- Derek D. Martin http://www.pizzashack.org/ GPG Key ID: 0x81CFE75D -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE/HWh6djdlQoHP510RAtkhAKC262xbMTKp/kpdhYnw2iBfK+QiSACfXKd2 p3ofq/lFeqqx2oFjLZYurZU= =SfA5 -----END PGP SIGNATURE----- |
From: Mr. M. L. <mai...@ya...> - 2003-07-22 15:57:32
|
I'm trying to use winscp, which basically does everything through scp. I also use sshfs from lufs. I got latest rssh the other day I have authorized_keys in /home/share/.ssh dir, so that user share from a certain machine does not have to type password. This doesnt work with my current rssh setup, so I must have done something wrong. it prompts for password, which it should not, and it rejects what i put. What I am wanting to do is to restrict user share to /share, and possibly /share/html which symlinks to /var/www/html(of which he is part of the group to access both). I did usermod and changed his shell to rssh, and I had this in the config file # This is the default rssh config file # set the log facility. "LOG_USER" and "user" are equivalent. logfacility = LOG_USER # you can use comments at end of line # Leave these both uncommented to make the default action for rssh to lock # users out completely... allowscp #allowsftp # set the default umask umask = 022 # If you want to chroot users, use this to set the directory # if you DO NOT want to chroot users, LEAVE THIS COMMENTED OUT. # Quotes not required unless path contains a space... chrootpath="/share dir" ########################################## # EXAMPLES of configuring per-user options # ALL OF THESE ARE THOROUGHLY TESTED! IF THEY DON'T WORK FOR YOU, YOU BROKE # SOMETHING! IT'S PROBABLY YOUR CHROOT ENVIRONMENT... #user=rudy:077:10: # the path can simply be left out to not chroot #user=rudy:077:10 # the ending colon is optional #spaces in the path must be quoted... #user=rudy:011:01:"/usr/local/chroot dir" # scp with chroot #user=ddm:011:01:"/usr/local/chroot dir" # sftp with chroot #user=rudy:011:10:"/usr/local/chroot dir" # sftp with chroot #user=rudy:011:11:"/usr/local/chroot dir" # both with chroot #user="rudy:011:01:/usr/local/chroot dir" # whole user string can be quoted #user=rudy:01"1:01:/usr/local/chroot dir" # or somewhere in the middle, freak! #user=rudy:'011:01:/usr/local/chroot dir' # single quotes too # non-quoted spaces don't matter, so long as they aren't in the middle of a # token (like a keyword) #user = "rudy:011:01:/usr/local/chroot dir" #user = "rudy:011:01:/usr/local/chroot dir" # neither do comments at line end __________________________________ Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software http://sitebuilder.yahoo.com |
From: MAL <ma...@ko...> - 2003-07-08 15:15:19
|
Derek Martin wrote: [ ideas for improvement ] Thanks, I'll look into coding that. > -=-=-=- > > FWIW, what I would do to solve your problem is create the users' home > directories and the configurations in them as root, and leave them > owned by root, making them non-writable to the user. Then create a > directory within those home dirs called something like "files", where > they could cd to using sftp, to do their file transfers. If you're > serving out the stuff that's there via web server, it's a simple > matter to tell the server to treat that new directory as the users' > public_html directories... > > If they use scp instead of sftp, it's a simple matter to copy files > there, i.e.: > > scp myfile.html server:files/ > > No cd-ing necessary. I'm afraid we host 100+ simpletons who just _will not_ understand/comprehend that. It's hard enough getting them to understand how to connect for upload in the first place. Thank you kindly for your input though, i'll get back to you as soon as I make some progress :) Cheers, MAL |
From: Derek M. <co...@pi...> - 2003-07-08 12:53:01
|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Tue, Jul 08, 2003 at 08:17:08AM +0100, MAL wrote: > I cannot change user's home directories, as I have other user specific > data stored in them, (programs that create configs that cannot be > specified to be elsewhere), but I simply want the user placed in > another, empty web directory when they sftp in for the first time. > > Is there any way to do this with rssh? Well, I just released v2.1.0, which has per-user configurations. With that version it /can/ be done, but it's a messy hack. What you'd need to do is create a user configuration for every user, and chroot them to the new directory. The trouble with this is that now, you have to set up a chroot jail for every single user. Aside from being tedious and error-prone, this is a bad idea, because it's resource-intensive and you'll never be able to capture the logs from these users once they've been chrooted. See the CHROOT file in the source distribution for the details of why, and see the rssh.conf man page for the details of how (from v2.1.0 in both cases -- it's just not there in earlier releases). At the moment, I consider rssh to be done; it's time for me to move on to other, more interesting projects. So, if you want this functionality to work more cleanly than outlined above, you're going to have to write it. That said, I kinda see the utility of this (though I'm still not entirely convinced it's necessary). If you do write the code, I might consider posting your patch on a contrib page on the web site. Or, if I'm bored enough, at some point I might even consider writing it myself... but don't count on that. There are two ways I see to add this cleanly to the existing code. I would probably implement both, if I were to do it at all. 1) add a new config keywword, something like "fake_homedir" which takes a path as its argument (though I already don't like that particular name). rssh would then look for a directory with the current user's username under that directory, and cd to that directory, as if it were the user's home directory. 2) add a third bit to the per-user access bit field, to indicate whether or not chrooting is desired. If the bit is 0, but a path is specified in the user's config, cd to that path as if it were the user's home directory. - -=-=-=- FWIW, what I would do to solve your problem is create the users' home directories and the configurations in them as root, and leave them owned by root, making them non-writable to the user. Then create a directory within those home dirs called something like "files", where they could cd to using sftp, to do their file transfers. If you're serving out the stuff that's there via web server, it's a simple matter to tell the server to treat that new directory as the users' public_html directories... If they use scp instead of sftp, it's a simple matter to copy files there, i.e.: scp myfile.html server:files/ No cd-ing necessary. HTH... - -- Derek D. Martin http://www.pizzashack.org/ GPG Key ID: 0xDFBEAD02 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE/Cr6NdjdlQoHP510RAiWsAJ4xMAcvw42XnyL9Jil6oLvIp7IS1ACgrokU faZhAqP6sauXZKzaZ+VXEQM= =uzBB -----END PGP SIGNATURE----- |
From: MAL <ma...@ko...> - 2003-07-08 07:17:22
|
Derek Martin wrote: > On Mon, May 19, 2003 at 07:14:12PM +0100, MAL wrote: > >>Hi ppl, >> >>Is there any way to get sftp and/or scp to change to a different >>starting directory on connect. I don't mean from a user's point of >>view.. I know sftp <user@host:/dir> works.. I mean on the server end. > > > rssh will not do this. The obvious answer is to change the home > directories on the server to be the place where you want the users to > log into... I can't imagine any reason you wouldn't want to do that, > since you're obviously limiting their access with rssh, and you want > to make it always change to some directory. Just change their home > dir in the password file. > > If you're using NIS or similar, use sed on the maps to make a local > password file with the home directories fixed so they point where you > want 'em. I cannot change user's home directories, as I have other user specific data stored in them, (programs that create configs that cannot be specified to be elsewhere), but I simply want the user placed in another, empty web directory when they sftp in for the first time. Is there any way to do this with rssh? I don't want to resort to changing rssh, as that would break it's tested stability, but is there no other way? Cheers, MAL |
From: Derek M. <co...@pi...> - 2003-07-07 22:21:05
|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I'm pleased to announce that rssh now has per-user configurations! Today I released rssh v2.1.0 with that last peice of functionality to be added, bringing active development of rssh to a close. Additionally, I spent several hours testing and debugging this release as thoroughly as I could think to, and I'm pleased to report (tongue in cheek) that there are no bugs in v2.1.0 either! Seriously, I removed several long-standing buglets in the parser dealing with skipping whitespace, quoting, and similar. Also, fail() now correctly reports what options are allowed to the user running it. And maybe one or two other little things were fixed, plus documentation updates. As you probably know, rssh is a small shell which can be used to restrict users' access to a system running sshd via either scp, sftp, or both. Or, new in 2.1, neither. It's overkill for the job, but you can now configure rssh to lock out users entirely. And, also as of 2.1.0, you can configure all that on a per-user basis. rssh is designed to work with OpenSSH on Linux platforms, but also works on other POSIX.2-compliant OSes (it requires wordexp(), which is defined by POSIX.2), and probably also works with other sshd's. You can download the latest release here: http://www.pizzashack.org/rssh/downloads.shtml - -- Derek D. Martin http://www.pizzashack.org/ GPG Key ID: 0x81CFE75D -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE/CfIqdjdlQoHP510RAnKuAJ9PxV8m/E9IwBLmfsbisWnLSPnvuQCgtgu3 c2QngBgQhG8GX4+33ufQTuc= =ZIel -----END PGP SIGNATURE----- |
From: Kai H. <th...@ka...> - 2003-07-04 08:59:37
|
Hello again, though not explicitly recommended, I copied sftp-server to /usr/lib and set "Subsystem sftp" in sshd_config accordingly. This seems to work just fine, thanks for your help. Kai Hanisch -- It is a good idea to be at the console of your machine when twiddling your network restrictions. If you are working remotely, then you can lock yourself out of your machine inadvertently with a missing or missplaced rule. If that happens, you are reduced to using the standard Windows remote administration tool - your car. (Hacking Linux Exposed, p. 484) |
From: Derek M. <co...@pi...> - 2003-07-03 11:27:27
|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Thu, Jul 03, 2003 at 11:49:37AM +0200, Kai Hanisch wrote: > > Hi there, > > I recently installed rssh 2.0.3 on my Debian sid (via apt-get) to > restrict my www-Admin to sftp only. As long as his shell is set to > /bin/bash he can log in via sftp, but with his shell set to > /usr/bin/rssh, the connection is immedeately terminated. Syslog states: 1. Download 2.0.4 from www.pizzashack.org/rssh/downloads.html 2. unpack the sources 3. run configure 4. mail the output of configure to the list. > Jul 3 11:10:43 ignition rssh[6035]: command: /usr/local/libexec/sftp-server Oh, nevermind. The path to sftp-server is hard-coded in the binary for security reasons. You're using a local installation of openssh, but the Debian package for rssh expects it to be installed as /usr/lib/sftp-server, which is where the debian package puts it. You have 2 choices: - install Debian's ssh packages (not recommended) - download rssh as above, and install from sources (recommended) The latter is recommended because you've probably got OpenSSH 3.5 or later installed (which is good, so you can make sure the sshd parameter PermitUserEnvironment is set to no), and because 2.0.4 fixes some bugs in all previous 2.0 releases. - -- Derek D. Martin http://www.pizzashack.org/ GPG Key ID: 0x81CFE75D -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE/BBL6djdlQoHP510RAkWxAJ0aGrpPhFhNXWqnEJU0Cc4UkppXmACgpE/k vcUVIcDVpq5rkdBaGbA11YI= =BmeS -----END PGP SIGNATURE----- |
From: Kai H. <th...@ka...> - 2003-07-03 09:47:11
|
Hi there, I recently installed rssh 2.0.3 on my Debian sid (via apt-get) to restrict my www-Admin to sftp only. As long as his shell is set to /bin/bash he can log in via sftp, but with his shell set to /usr/bin/rssh, the connection is immedeately terminated. Syslog states: Jul 3 11:10:43 ignition rssh[6035]: setting log facility to LOG_USER Jul 3 11:10:43 ignition rssh[6035]: allowing scp to all users Jul 3 11:10:43 ignition rssh[6035]: allowing sftp to all users Jul 3 11:10:43 ignition rssh[6035]: setting umask to 022 Jul 3 11:10:43 ignition rssh[6035]: user attempted to execute forbidden commands Jul 3 11:10:43 ignition rssh[6035]: command: /usr/local/libexec/sftp-server The stfp-sever has permissions 755. I do not use a chrooted environment (yet) and did not touch the rssh.conf, so allowscp and allowsftp are both set. Any help would be appreciated. Regards Kai Hanisch -- It is a good idea to be at the console of your machine when twiddling your network restrictions. If you are working remotely, then you can lock yourself out of your machine inadvertently with a missing or missplaced rule. If that happens, you are reduced to using the standard Windows remote administration tool - your car. (Hacking Linux Exposed, p. 484) |
From: Derek M. <co...@pi...> - 2003-07-02 18:54:25
|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I released rssh v2.0.4 today. It fixes bugs in the parser which affect quoted arguments in the config file, as well as the code which builds the vector for the arguments to the exec call. In the latter case, arguments which contain a space were treated as two sepearate args. The man page was also updated to include information about quoting values which contain spaces in the config file. This functionality was previously undocumented, so it should affect almost no one, but it does cause a segfault in rssh versions <= 2.0.3 if you try to quote values in the config file. For example, you might want to chroot to a directory which contains a space: chrootpath="/usr/local/chroot home" [Personally, I think including spaces in paths is generally a bad idea, but there may be times when it is desireable/necessary.] Additionally, the default shell options were modified to allow only scp, in the event that no config file is present. Learn more about rssh: http://www.pizzashack.org/rssh/ Downloads: http://www.pizashack.org/rssh/downloads.shtml Enjoy! - -- Derek D. Martin http://www.pizzashack.org/ GPG Key ID: 0x81CFE75D -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE/AyoydjdlQoHP510RAn+MAJ40ZxRQkwxQUbtimUTHfMySznLCAACeN0uM 9mSMrYHW/EARCmY/R+XnqYI= =jXzl -----END PGP SIGNATURE----- |