search for: rbash

The sshd server has what I think is a serious flaw. There appears to be no way to turn off remote command execution. (someone please correct me if I am wrong). We have a server which uses a chroot jail, and rbash to severely limit what users can do on our system. The remote command bypasses all of that. ie. ssh user at host cat /etc/passwd will display the password file for the live system and not the chrooted jail. I've checked the man pages and so far I haven't seen anything that will allow m...

...ch? The two main problems I see are code auditting (which, while I understand C, I don't know the ssh source well enough to understand the patch), as well as waiting on patches to newly announced vulnerabilities. 2. the other options that we have for this are "restricted bash" (rbash), and the "scponly" shell - does anyone have any comments on either of those two as more (or less) recommended than the chrootssh patch? any other words of wisdom are very much appreciated! thanks, -lev

Hi, compilation of OpenSSH 4.2p1 / OpenSSL 0.9.8a / zlib 1.2.3 worked fine on Linux i386 / x86_64, SunOS, AIX and HP-UX. Compilation of OpenSSH 4.3p1 / OpenSSL 0.9.8a / zlib 1.2.3 works fine now only on Linux i386 / x86_64, SunOS, AIX. But on HP-UX 11.00 (gcc 3.3.2), "make" produces following... (cd openbsd-compat && make) gcc -o ssh ssh.o readconf.o

Note: I am digest subscriber so if you could copy me directly on any reply to the list I would appreciate it very much. I sent this to the OpenSSH list (secureshell at securityfocus.com) yesterday and received no response so I am asking here in hopes that someone else has run across this problem on CentOS. We have encountered a situation that requires sftp access to one of our server by an

...083:5000 157 d usr 040750 4096 23083:5000 534 d var 040750 4096 23083:5000 690 - init 100750 3264 23083:5000 febootstrap: debug: listing directory /bin 12 d . 040750 4096 23083:5000 2 d .. 040755 4096 88619:5000 540 l rbash 120777 4 0:0 -> bash 541 l sh 120777 9 0:0 -> /bin/bash febootstrap: debug: listing directory /lib 109 d . 040750 4096 23083:5000 2 d .. 040755 4096 88619:5000 110 d cryptsetup 040750 4096 23083:5000 113 d firmware...

https://bugzilla.mindrot.org/show_bug.cgi?id=1494 Summary: doesn't look on path for $SHELL Classification: Unclassified Product: Portable OpenSSH Version: 5.1p1 Platform: Other URL: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=49272 8 OS/Version: Linux Status: NEW Severity:

https://bugzilla.mindrot.org/show_bug.cgi?id=2283 Bug ID: 2283 Summary: option to execute command without shell Product: Portable OpenSSH Version: 6.6p1 Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 Component: sshd Assignee: unassigned-bugs at

...enerator] make_file(bin/dnsdomainname,*,2) [generator] make_file(bin/domainname,*,2) [generator] make_file(bin/egrep,*,2) [generator] make_file(bin/ex,*,2) [generator] make_file(bin/fgrep,*,2) [generator] make_file(bin/gtar,*,2) [generator] make_file(bin/nisdomainname,*,2) [generator] make_file(bin/rbash,*,2) * This continues up to about the 348,000-line mark and we see "delta- transmission enabled": delete_in_dir(lib) delta-transmission enabled recv_generator(.,0) set modtime of . to (1153412202) Thu Jul 20 18:16:42 2006 recv_generator(.autofsck,1) recv_generator(bin,2) recv_generator...

...100755 6720 0:0 1034 - mt-gnu 100755 66184 0:0 1035 - mv 100755 110120 0:0 1036 - netstat 100755 120496 0:0 1037 l pidof 120777 14 0:0 -> /sbin/killall5 1038 - ps 100755 99072 0:0 1039 - pwd 100755 31968 0:0 1040 l rbash 120777 4 0:0 -> bash 1041 - readlink 100755 39872 0:0 1042 - rm 100755 56848 0:0 1043 - rmdir 100755 41120 0:0 1044 - run-parts 100755 15592 0:0 1045 - sed 100755 65472 0:0 1046 l sh 120777 4 0:0 -> dash 1047...

...4 - journalctl 100755 498936 0:0 334 - lowntfs-3g 100755 105136 0:0 330 - lesskey 100755 19824 0:0 304 - dash 100755 154072 0:0 352 - ntfscat 100755 26728 0:0 349 - ntfs-3g.probe 100755 10312 0:0 409 - zmore 100755 1910 0:0 366 l rbash 120777 4 0:0 -> \x11 338 - mkdir 100755 76848 0:0 402 - zcmp 100755 1777 0:0 322 - gzip 100755 98240 0:0 303 - cpio 100755 141472 0:0 278 - btrfs-image 100755 270136 0:0 286 - bzcat 100755 31288 0:0 276 - btr...

...55 31864 0:0 1146 - echo 100755 31296 0:0 1158 - gzip 100755 94048 0:0 1180 - mt-gnu 100755 68760 0:0 1235 - zfgrep 100755 142 0:0 1189 - ntfscmp 100755 34920 0:0 1177 - more 100755 39600 0:0 1142 - df 100755 97736 0:0 1149 - fgconsole 100755 10488 0:0 1172 - lsblk 100755 44688 0:0 1203 l rbash 120777 4 0:0 -> bash 1179 - mountpoint 100755 10456 0:0 1213 l sh 120777 4 0:0 -> dash 1134 - chmod 100755 56032 0:0 1212 - setupcon 100755 12052 0:0 1236 - zforce 100755 2133 0:0 1229 - vdir 100755 110080 0:0 1238 - zless 100755 2039 0:0 1163 - less 100755 153664 0:0 1155 - grep 100...

...ct-super 100755 245368 0:0 294 - bzip2recover 100755 14616 0:0 313 - fgrep 100755 28 0:0 295 l bzless 120777 6 0:0 -> *\v 321 - gzexe 100755 5927 0:0 311 - egrep 100755 28 0:0 385 - systemd-notify 100755 35248 0:0 366 l rbash 120777 4 0:0 -> \x11 399 - wdctl 100755 31376 0:0 357 - ntfsinfo 100755 55416 0:0 317 - fusermount 104755 30800 0:0 279 - btrfs-map-logical 100755 249464 0:0 277 - btrfs-find-root 100755 245368 0:0 278 - btrfs-image 100755 270136...

...55 38952 0:0 1236 - ntfswipe 100755 43632 0:0 1237 l open 120777 6 0:0 -> openvt 1238 - openvt 100755 18912 0:0 1239 l pidof 120777 14 0:0 -> /sbin/killall5 1240 - ps 100755 89136 0:0 1241 - pwd 100755 31400 0:0 1242 l rbash 120777 4 0:0 -> bash 1243 - readlink 100755 39536 0:0 1244 - rm 100755 60168 0:0 1245 - rmdir 100755 43664 0:0 1246 - run-parts 100755 19248 0:0 1247 - running-in-container 100755 254 0:0 1248 - sed 100755 73352 0:0 1249 - se...

...8 - netstat 100755 120184 0:0 819 - ntfs-3g 100755 52832 0:0 820 - ntfs-3g.probe 100755 10432 0:0 821 - ntfs-3g.secaudit 100755 55848 0:0 822 - ntfs-3g.usermap 100755 14640 0:0 823 - ps 100755 101232 0:0 824 - pwd 100755 39472 0:0 825 l rbash 120777 4 0:0 -> bash 826 - readlink 100755 47656 0:0 827 - rm 100755 64208 0:0 828 - rmdir 100755 39392 0:0 829 - run-parts 100755 19208 0:0 830 - sed 100755 69088 0:0 831 l sh 120777 20 0:0 -> /etc/alte...

Thanks again, but when I run the command "sudo update-guestfs-appliance" the result is "unpacking /tmp/superminef3fb7da4d1971287149691a8361ae0d.tmp/syslinux_3%3a4.05+dfsg-6+deb8u1_amd64.deb ... unpacking /tmp/superminef3fb7da4d1971287149691a8361ae0d.tmp/sysv-rc_2.88dsf-41ubuntu6_all.deb ... unpacking