I'm not aware of any runtime options to enable/disable these things and
after another quick run through of the code I see nothing:

DEFUN (vtysh_ssh,
       vtysh_ssh_cmd,
       "ssh WORD",
       "Open an ssh connection\n"
       "[user@]host\n")
{
  execute_command ("ssh", 1, argv[0], NULL);
  return CMD_SUCCESS;
}


execute_command just forks and straight execlp's the command.


donald



On Mon, Aug 17, 2015 at 11:29 AM, Paul Jakma <[email protected]> wrote:

> On Wed, 12 Aug 2015, Donald Sharp wrote:
>
> Restrict shell access from vtysh to those that intentionally turn it
>> on via a ./configure option.
>>
>
> Aren't there already runtime options to enable/disable these things?
>
> Should we just tweak those defaults?
>
> (There's a much bigger conversation needed about the future of access to
> runtime and config state in Quagga, of course).
>
> regards,
> --
> Paul Jakma      [email protected]  @pjakma Key ID: 64A2FF6A
> Fortune:
> A computer lets you make more mistakes faster than any other invention,
> with the possible exceptions of handguns and Tequilla.
>         -- Mitch Ratcliffe
>
_______________________________________________
Quagga-dev mailing list
[email protected]
https://lists.quagga.net/mailman/listinfo/quagga-dev

Reply via email to