No need to compile "!" out of asterisk source.... Just put SHELL=/bin/false in your login script....
The ! command will not work... Alex Kindly consider the environment before printing this e-mail. > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:asterisk-users- > [EMAIL PROTECTED] On Behalf Of Jeff LaCoursiere > Sent: Friday, October 31, 2008 9:52 PM > To: Asterisk Users Mailing List - Non-Commercial Discussion > Subject: Re: [asterisk-users] giving a user asterisk CLI access: how bad > could it get > > > I think everyone is missing the point of the question. He wants to know > if the user's shell is set to rasterisk, can they then use the CLI to get > a command shell. > > The answer is "yes, they can", and in that case it may not be such a > good idea. As someone else suggested, you can run a shell with "!". I > imagine this could be compiled out of the CLI if you were so inclined. > > j > > On Sat, 1 Nov 2008, Tzafrir Cohen wrote: > > > On Sat, Nov 01, 2008 at 12:38:52AM +0100, Dima wrote: > > > Setting the user's shell to /usr/sbin/rasterisk works. On login user > > > gets into asterisk CLI if asterisk is running (user just has to have > > > write permission to /var/lib/asterisk.*). > > > > How does that user "login"? > > > > -- > > Tzafrir Cohen > > icq#16849755 jabber:[EMAIL PROTECTED] > > +972-50-7952406 mailto:[EMAIL PROTECTED] > > http://www.xorcom.com iax:[EMAIL PROTECTED]/tzafrir > > > > _______________________________________________ > > -- Bandwidth and Colocation Provided by http://www.api-digital.com -- > > > > asterisk-users mailing list > > To UNSUBSCRIBE or update options visit: > > http://lists.digium.com/mailman/listinfo/asterisk-users > > *** Handled by Will's new toy *** > > > > _______________________________________________ > -- Bandwidth and Colocation Provided by http://www.api-digital.com -- > > asterisk-users mailing list > To UNSUBSCRIBE or update options visit: > http://lists.digium.com/mailman/listinfo/asterisk-users _______________________________________________ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
