Thu 17 Aug 2006 11:53:34 PM UTC, original submission:
case 1:
allowed_commands = [
(df, df);
(ls, "ls incoming");]
allow_any_command = false
> ! ls
---------------- Exited with code 1
OK
> ! ls /
For arbitrary commands, you must set 'allowed_any_command'
OK
> ! ls incoming
For arbitrary commands, you must set 'allowed_any_command'
False, this should work
> ! "ls incoming"
False, should be the same as last
> ! mount
False, there should be the error message
-------------------------------------------
case 2:
allowed_commands = [
(df, df);
(ls, "ls incoming");]
allow_any_command = true
> ! ls
---------------- Exited with code 1
OK
> ! ls /
/:
bin
boot
...
OK
> ! ls incoming
---------------- Exited with code 1
OK
> ! "ls incoming"
False, should be the same as last
> ! mount
False, this should work when allow_any_command = true
-------------------------------------------
So allow_any_command option doesn't work
and ! doesn't work correct
anyway, mldonkey gets the password uncrypted so this would be a major security risk
if it would work ;)
I suggest remove allow_any_command or remove shell commands completely. I doubt someone will miss this feature.
|