News : The level of daily SPAM has reached insane proportions, all registrations are now manual. I ask you to send me an e-mail (john (at) murga (dot) org), to confirm that you want me to create an account for you.


Post Reply  Post Thread 
Praise for murgalua
Author Message
Juergen
Member
***


Posts: 81
Group: Registered
Joined: May 2007
Status: Offline
Reputation: 0
Post: #1
RE: Praise for murgalua

asafp Wrote:
I should rephrase that. I have authority to install things into my own directory. I don't have authority to execute a compiled module that is not in the standard /usr/bin or /usr/lib/bin. So, in other words, I can install it, but not execute it.

This type of situation is common with the limited shell access offered by many web hosting companies.


Normally, such an account doesn't make sense. If it is that limited, ftp only access would make more sense (from an administrator point of view).

If a (stupid) administrator thinks he can limit access to the system with a normal restricted shell, he is totally wrong. Normally it is nearly impossible to completely lock a system with a r-shell. There are so many possibilities to circumvent it, so that most admins (those who try are normally not the brightest/experienced) don't even bother to try (except they want to adress novice users). The only way to lock a system completely is to use SELinux and co. (which is a pain to set up).

Have you tried to put the binary in your homedir, set the permissions and use "env ~/murgaLua" for example?

I guess there are also perl,python,awk, ..... interpreters in /usr/bin? This way there should be no problem to call murgaLua or a more useful shell.

Juergen

P.S.: It is of course a completely different question if it is a good idea to circumvent such restrictions (The owner/administrator of the system could be offended).

03-08-2008 04:37 AM
Find all posts by this user Quote this message in a reply
Post Reply  Post Thread 

Messages In This Thread
Praise for murgalua - asafp - 03-07-2008, 01:05 PM
RE: Praise for murgalua - mikshaw - 03-07-2008, 01:21 PM
RE: Praise for murgalua - asafp - 03-07-2008, 02:33 PM
RE: Praise for murgalua - mikshaw - 03-08-2008, 12:10 AM
RE: Praise for murgalua - Juergen - 03-08-2008 04:37 AM
RE: Praise for murgalua - asafp - 03-11-2008, 10:38 AM
RE: Praise for murgalua - Juergen - 03-11-2008, 09:08 PM
RE: Praise for murgalua - asafp - 03-13-2008, 10:28 AM
RE: Praise for murgalua - asafp - 03-13-2008, 10:40 AM
RE: Praise for murgalua - asafp - 03-13-2008, 10:46 AM
RE: Praise for murgalua - Juergen - 03-14-2008, 01:17 AM
RE: Praise for murgalua - asafp - 03-14-2008, 03:01 AM
RE: Praise for murgalua - Juergen - 03-14-2008, 03:52 AM
RE: Praise for murgalua - asafp - 03-14-2008, 05:44 AM

View a Printable Version
Send this Thread to a Friend
Subscribe to this Thread | Add Thread to Favorites

Forum Jump: