Does the client have SSH access, or just FTP?

Arnaud DUMAS de RAULY wrote:
> Your assumptions are correct. The client needs access to the ftp (and  
> all of our clients have this acces, as well as all of our competitor's  
> clients) to be able to change anything he wants, such as server name,  
> password, etc ... this is how it's been for the past 2 years and we've  
> never had this problem before.
> 
> I asked him how he manages to this and I'm waiting on an answer, but I  
> assume that I won't get it. I can always shut down his account but my  
> concern is if he can do it, then everyone can.
> 
> PS: my other solution is to give acces to only a couple of parameters  
> in the server.cfg via my game panel, which brings me to another  
> question that will be the subject of another email: is there a  
> freelancer out there that can build us a new gamepanel (php, mysql of  
> course), I'm also going to put an RFP up on the major dev sites.
> 
> Thanks all for your input.
> 
> 
> 
> Le 4 août 09 à 17:29, David A. Parker a écrit :
> 
>> Let me make a few assumptions here.  I assume that:
>>
>> 1. You have a box and the "client" in question pays for a CS 1.6  
>> server
>> with N slots which runs on this box.
>>
>> 2. You don't want him to change the number of slots because he only  
>> pays
>> for N slots.
>>
>> Is this the case?  If so, then my solution to the problem would be to
>> tell him that he either explains to you in detail exactly what he is
>> doing and how he is doing it, or you cancel his service and revoke his
>> access to the box.
>>
>> If my assumptions are incorrect then I must be misunderstanding all of
>> this, since I can't think of any other reason he would have access to
>> the server.cfg but you wouldn't want him changing the slot count.
>>
>> Arnaud DUMAS de RAULY wrote:
>>> Yes he can upload different server.cfg
>>>
>>> The server is launched by command line, the command-line overrides  
>>> the
>>> setting in the server.cfg doesn't it, unless maybe the "autoupdate"
>>> feature enables a reboot ignoring the commandline (which seems
>>> impossible though) ?
>>> I've been hosting servers for the past year and a half like that, I
>>> would have known earlier if a simple "maxplayers 24" line in the
>>> server.cfg changed anything .... I hope ...
>>>
>>> Thanks for your input.
>>>
>>> Le 4 août 09 à 17:08, David A. Parker a écrit :
>>>
>>>> When you say "he has ftp access" does that mean he can upload a
>>>> server.cfg file to the directory where you have CS installed?  If
>>>> that's
>>>> the case, I would guess he's uploading a custom server.cfg and it  
>>>> gets
>>>> read on map change.  Just a guess, though.
>>>>
>>>>    - Dave
>>>>
>>>> Arnaud DUMAS de RAULY wrote:
>>>>> Thanks guys for your answers, but here a couple more details:
>>>>> - the command script is protected
>>>>> - the guy says he does it using the server.cfg
>>>>> - gameservers are launched as a user and not as root
>>>>> - he has ftp access
>>>>> - the bins and .so are not protected
>>>>>
>>>>> Thanks for your time.
>>>>>
>>>>> Le 4 août 09 à 16:59, Ronny Schedel a écrit :
>>>>>
>>>>>> Protect your start scripts.
>>>>>>
>>>>>>> Hi everyone,
>>>>>>> I just found out one of my clients can change the slot count of  
>>>>>>> his
>>>>>>> server (CS 1.6), does anyone know how ou know how to stop him  
>>>>>>> from
>>>>>>> doing so ? Is there a common way of doing it and most  
>>>>>>> important, is
>>>>>>> there a fix ?
>>>>>>>
>>>>>>> I think he uses the server.cfg to send commands through to the
>>>>>>> server.
>>>>>>>
>>>>>>> Thanks all for your help
>>>>>>>
>>>>>>>
>>>>>>> _______________________________________________
>>>>>>> To unsubscribe, edit your list preferences, or view the list
>>>>>>> archives,
>>>>>>> please visit:
>>>>>>> http://list.valvesoftware.com/mailman/listinfo/hlds_linux
>>>>>>>
>>>>>> _______________________________________________
>>>>>> To unsubscribe, edit your list preferences, or view the list
>>>>>> archives, please visit:
>>>>>> http://list.valvesoftware.com/mailman/listinfo/hlds_linux
>>>>> _______________________________________________
>>>>> To unsubscribe, edit your list preferences, or view the list
>>>>> archives, please visit:
>>>>> http://list.valvesoftware.com/mailman/listinfo/hlds_linux
>>>>>
>>>> -- 
>>>>
>>>> Dave Parker
>>>> Utica College
>>>> Integrated Information Technology Services
>>>> (315) 792-3229
>>>> Registered Linux User #408177
>>>>
>>>>
>>>> _______________________________________________
>>>> To unsubscribe, edit your list preferences, or view the list
>>>> archives, please visit:
>>>> http://list.valvesoftware.com/mailman/listinfo/hlds_linux
>>>
>>> _______________________________________________
>>> To unsubscribe, edit your list preferences, or view the list  
>>> archives, please visit:
>>> http://list.valvesoftware.com/mailman/listinfo/hlds_linux
>>>
>> -- 
>>
>> Dave Parker
>> Utica College
>> Integrated Information Technology Services
>> (315) 792-3229
>> Registered Linux User #408177
>>
>>
>> _______________________________________________
>> To unsubscribe, edit your list preferences, or view the list  
>> archives, please visit:
>> http://list.valvesoftware.com/mailman/listinfo/hlds_linux
> 
> 
> _______________________________________________
> To unsubscribe, edit your list preferences, or view the list archives, please 
> visit:
> http://list.valvesoftware.com/mailman/listinfo/hlds_linux
> 

-- 

Dave Parker
Utica College
Integrated Information Technology Services
(315) 792-3229
Registered Linux User #408177


_______________________________________________
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux

Reply via email to