Re: [Asterisk-Users] Disabling ! command
since I run asterisk as root with a CLI open on TTY12 I was wondering if the ! (shell) command can be disabled from the config, for safety reasons it seems me usefully. well. IMHO if someone can get access to your asterisk console, they can always ctrl+z or shutdown now or something. secure your server. don't trust asterisk to do it roy ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
Re: [Asterisk-Users] Disabling ! command
I have asterisk auto-magicly start from inittab. I have yest to try something that can do anything to the server (other than stop asterisk) from the * CLI. If anyone would like a copy of the scripts i use, contact me off-list. BTW: I had already removed the ! command from * before using it this way. -- Christopher Dobbs Roy Sigurd Karlsbakk wrote: since I run asterisk as root with a CLI open on TTY12 I was wondering if the ! (shell) command can be disabled from the config, for safety reasons it seems me usefully. well. IMHO if someone can get access to your asterisk console, they can always ctrl+z or shutdown now or something. secure your server. don't trust asterisk to do it roy ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
Re: [Asterisk-Users] Disabling ! command
I decided, since there was interest, to send them to the who list. Here they are. BTW: I am also sending an excerpt from my passwd and inittab files. the passwd entry is so that i can ssh into [EMAIL PROTECTED] and get an asterisk CLI. This Feature is why I have ! disabled. I hope that this helps people out. I would strongly suggest this only if: 1) The ! command is disabled int the CLI. 2) Telnet is COMPLETELY disabled!!! 3) SSH access is only by the use of RSA keys. This is the setup that we use. It works very good for us. -- Christopher Dobbs ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
Re: [Asterisk-Users] Disabling ! command
-- Sorry, Forgot to attach the files!! :) I decided, since there was interest, to send them to the who list. Here they are. BTW: I am also sending an excerpt from my passwd and inittab files. the passwd entry is so that i can ssh into [EMAIL PROTECTED] and get an asterisk CLI. This Feature is why I have ! disabled. I hope that this helps people out. I would strongly suggest this only if: 1) The ! command is disabled int the CLI. 2) Telnet is COMPLETELY disabled!!! 3) SSH access is only by the use of RSA keys. This is the setup that we use. It works very good for us. -- Christopher Dobbs ast:12345:respawn:/sbin/astmain pbx:x:0:0::/root:/sbin/astrun #! /bin/bash exec ssh [EMAIL PROTECTED] #! /bin/bash exec ssh [EMAIL PROTECTED] ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
[Asterisk-Users] Disabling ! command
Hi, since I run asterisk as root with a CLI open on TTY12 I was wondering if the ! (shell) command can be disabled from the config, for safety reasons it seems me usefully. Tnx for any help ! -- Best regards, Alessio mailto:[EMAIL PROTECTED] ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
Re: [Asterisk-Users] Disabling ! command
you could comment that portion out and rebuild? On Fri, 2004-12-17 at 13:15 +0100, Alessio Focardi wrote: Hi, since I run asterisk as root with a CLI open on TTY12 I was wondering if the ! (shell) command can be disabled from the config, for safety reasons it seems me usefully. Tnx for any help ! ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
Re[2]: [Asterisk-Users] Disabling ! command
Hello Justin, Friday, December 17, 2004, 3:43:12 PM, you wrote: JC you could comment that portion out and rebuild? You are right, I will do like this (well at first I have to understand where the comment has to be put) ... just wondering if maybe we can suggest a new option in the config for the purpose. -- Best regards, Alessiomailto:[EMAIL PROTECTED] ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
