[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Jailkit-users] scp problem with jailkit

From: Olivier Sessink
Subject: Re: [Jailkit-users] scp problem with jailkit
Date: Fri, 11 Mar 2016 08:58:28 +0100
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.5.1

On 10-03-16 14:45, Johan Söderberg wrote:

After adding "allow_word_expansion = 1" to the two groups I have in jk_lsh.ini it started working. So I think the bug is the other way around. The original jk_lsh.ini file looked like this:

[group grp1]
paths= /usr/bin, /usr/lib/
executables= /usr/bin/scp, /usr/libexec/openssh/sftp-server

[group grp2]
paths= /usr/bin, /usr/lib/
executables= /usr/bin/scp, /usr/libexec/openssh/sftp-server

With the above configuration and if allowed_word_expansion is by default 0 it still let's users who are members of the group grp1 to run scp with wildcards.

I found the biggest part of the bug, if the setting was missing, the option was not correctly disabled. I don't understand why it was disabled for your group grp2. So this still puzzles me. I cannot reproduce that on my testsystem.

Bluefish website http://bluefish.openoffice.nl/
Blog http://oli4444.wordpress.com/

reply via email to

[Prev in Thread] Current Thread [Next in Thread]