ghantoos / lshell

lshell is a shell coded in Python, that lets you restrict a user's environment to limited sets of commands, choose to enable/disable any command over SSH (e.g. SCP, SFTP, rsync, etc.), log user's commands, implement timing restriction, and more.
GNU General Public License v3.0
439 stars 111 forks source link

Permission denied for command inside script #192

Closed EduSSH closed 1 month ago

EduSSH commented 6 years ago

As of version 0.9.8 I'm having permission denied problems for commands inside a script. for example, I create a script like "showssh"

#/bin/bash ps x|grep sshd:|grep grep -v

and when I run it returns the errors: /usr/bin/online: line 2: /bin/ps: Permission denied /usr/bin/online: line 2: /bin/grep: Permission denied /usr/bin/online: line 2: /bin/grep: Permission denied

With version 0.9.7 did not have this problem, however, right now that I reinstall the old version through the repository of my system the error persists.

It is so with Ubuntu 17 >, Debian 8 >. How can I solve?

lshell.conf [global] logpath : /var/log/lshell/ loglevel : 2 [default] allowed : ['showssh'] forbidden : [';', '&', '|','','>','<', '$(', '${', 'cat','}',')'] warning_counter : 5 intro : "\n==[ TESTE ]==\n" timer : 300 scp : 0 scp_upload : 0 scp_download : 0 sftp : 0 strict : 0 scpforce : "/tmp" history_size : 100 history_file : "/home/%u/.lshell_history"`

I installed with the command: python setup.py install

ghantoos commented 1 month ago

You should add your command to allowed_shell_escape in the conf file.

You can also set path_noexec to '' but this is not recommended.