Re: telnet as login shell

2005-10-16 Thread Aurelien Ricard

Stephen Le wrote:


On 10/16/05, Aurelien Ricard <[EMAIL PROTECTED]> wrote:
 


Stephen, try to put a telnet session in their ~/.bashrc
I've never tried but it should work.
   



While this works, it is insecure. A user can easily run a command like
'ssh [EMAIL PROTECTED] rm .bashrc' to delete the .bashrc file and get full
shell access.

I've resorted to using a Perl script as a login shell.



 


You're right,

chmod -w .bashrc ;)

Aurelien

--
Aurélien Ricard


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: telnet as login shell

2005-10-16 Thread Stephen Le
On 10/16/05, Aurelien Ricard <[EMAIL PROTECTED]> wrote:
> Stephen, try to put a telnet session in their ~/.bashrc
> I've never tried but it should work.

While this works, it is insecure. A user can easily run a command like
'ssh [EMAIL PROTECTED] rm .bashrc' to delete the .bashrc file and get full
shell access.

I've resorted to using a Perl script as a login shell.



Re: telnet as login shell

2005-10-16 Thread Aurelien Ricard

Benjamin A'Lee wrote:


On Sat, 2005-10-15 at 08:56 -0700, Stephen Le wrote:
 


Is it possible to change a user's login shell to an instance of telnet
to a user-unique port? When a user logs into my server, I'd like them
to be immediately dropped into a telnet session on a specific port
running on the server and to be disconnected when their telnet session
ends.
   



You should be able to write a script that calls telnet with the
appropriate options, and set that as the shell (add it to /etc/shells).
That's just a guess, haven't tested it.

   Ben

 


Ben, I don't think it works.
Stephen, try to put a telnet session in their ~/.bashrc
I've never tried but it should work.


Aurelien

--
Aurélien Ricard





--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: telnet as login shell

2005-10-15 Thread Benjamin A'Lee
On Sat, 2005-10-15 at 08:56 -0700, Stephen Le wrote:
> Is it possible to change a user's login shell to an instance of telnet
> to a user-unique port? When a user logs into my server, I'd like them
> to be immediately dropped into a telnet session on a specific port
> running on the server and to be disconnected when their telnet session
> ends.

You should be able to write a script that calls telnet with the
appropriate options, and set that as the shell (add it to /etc/shells).
That's just a guess, haven't tested it.

Ben

-- 
Termisoc Tech Officer: 
My Homepage: 
"I must have a prodigious quantity of mind; it takes me as much as a
week sometimes to make it up." - Mark Twain


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



telnet as login shell

2005-10-15 Thread Stephen Le
Is it possible to change a user's login shell to an instance of telnet
to a user-unique port? When a user logs into my server, I'd like them
to be immediately dropped into a telnet session on a specific port
running on the server and to be disconnected when their telnet session
ends.

Thanks.