mldonkey, a multi-networks file-sharing client - Bugs: bug #17456, shell commands broken
You are not allowed to post comments on this tracker with your current authentication level.
bug #17456: shell commands broken
Submitter: | orbit <orbit> | ||
Submitted: | Thu 17 Aug 2006 11:53:34 PM UTC | ||
Category: | None | Severity: | 3 - Normal |
Item Group: | None | Status: | Ready For Test |
Assigned to: | None | Open/Closed: | Closed |
Release: | 2.7.7 | Release: | |
Operating System: | Linux | Binaries Origin: | CVS / Self compiled |
CPU type: | None |
Fri 18 Aug 2006 06:58:32 PM UTC, comment #2: |
spiralvoice <spiralvoice> |
Fri 18 Aug 2006 06:54:24 PM UTC, comment #1: I will only list results other than yours + explanations.
directories
For arbitrary commands, you must set 'allowed_any_command'
|
spiralvoice <spiralvoice> |
Thu 17 Aug 2006 11:53:34 PM UTC, original submission:
case 1:
---------------- Exited with code 1
For arbitrary commands, you must set 'allowed_any_command'
For arbitrary commands, you must set 'allowed_any_command'
---------------- Exited with code 1
/:
---------------- Exited with code 1
|
orbit <orbit> |
No files currently attached
Depends on the following items: None found
Items that depend on this one: None found
There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.
Follow 3 latest changes.
Date | Changed by | Updated Field | Previous Value | => | Replaced by |
---|---|---|---|---|---|
2006-08-27 | spiralvoice | Reassign Item | From group mldonkey, a multi-networks file-sharing client, bugs tracker | To group mldonkey, a multi-networks file-sharing client, patch tracker | |
2006-08-18 | spiralvoice | Status | None | Ready For Test | |
2006-08-18 | spiralvoice | Attached File | - | Added commands.patch, #10558 |
Powered by Savane 3.13-d3ae.
Corresponding source code
case 2:
allowed_commands = [
(df, df);
(ls, "ls incoming");]
allow_any_command = true
=================================================================
directories
files
---------------- Exited with code 0
- This works now with the attached patch
=================================================================
/dev/sdb1 on / type reiserfs (rw,noatime,notail,user_xattr)
...
- This works now with the attached patch
=================================================================
"mldonkey gets the password uncrypted so this would be a major security risk if it would work ;)"
Because of uncrypted passwords its important users set
allowed_ips to a correct value. With such a good protection
using "!" command should be no problem.
What about having "!" restricted to admin users in multiuser patch?