If you want total control from AMI then point at an extension that you can set 
variables to commands and arguments, call an AGI and set variables that can be 
passed back to AMI via user events.
-- 
Jim Dickenson
mailto:dicken...@cfmc.com

CfMC
http://www.cfmc.com/



On Mar 16, 2011, at 3:03 PM, Danny Nicholas wrote:

> 
> From: asterisk-users-boun...@lists.digium.com 
> [mailto:asterisk-users-boun...@lists.digium.com] On Behalf Of Vinícius Fontes
> Sent: Wednesday, March 16, 2011 5:02 PM
> To: Asterisk Users Mailing List - Non-Commercial Discussion
> Subject: Re: [asterisk-users] Executing shell commands via AMI
>  
> But what about if asterisk running with non-privilege user?
> 
> Still it is not a good idea.
> 
> Yes I forgot to say that I also run Asterisk as a regular user, which also 
> helps with security.
>  
> But I really don't see much of a threat on this. AGI does almost the same.
>  
> This won’t help but I’ll chip in anyway.  In AGI, you have “total” local 
> control.  In AMI, it’s a crap shoot.
> --
> _____________________________________________________________________
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
> New to Asterisk? Join us for a live introductory webinar every Thurs:
>               http://www.asterisk.org/hello
> 
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>   http://lists.digium.com/mailman/listinfo/asterisk-users

--
_____________________________________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
               http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

Reply via email to