From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from lists.gentoo.org ([140.105.134.102] helo=robin.gentoo.org) by nuthatch.gentoo.org with esmtp (Exim 4.43) id 1E7CYc-00054j-Id for garchives@archives.gentoo.org; Mon, 22 Aug 2005 13:41:46 +0000 Received: from robin.gentoo.org (localhost [127.0.0.1]) by robin.gentoo.org (8.13.4/8.13.4) with SMTP id j7MDdX9k000640; Mon, 22 Aug 2005 13:39:33 GMT Received: from we-are-teh-b.org (mitglied.boese-ban.de [62.75.246.134]) by robin.gentoo.org (8.13.4/8.13.4) with ESMTP id j7MDdWl5010084 for ; Mon, 22 Aug 2005 13:39:32 GMT Received: from localhost (localhost [127.0.0.1]) by we-are-teh-b.org (Postfix) with ESMTP id 66623EC5B1 for ; Mon, 22 Aug 2005 15:43:22 +0200 (CEST) Received: from we-are-teh-b.org ([127.0.0.1]) by localhost (tacticalcube [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 20870-14 for ; Mon, 22 Aug 2005 15:43:15 +0200 (CEST) Received: from diamond (p54A8B128.dip0.t-ipconnect.de [84.168.177.40]) by we-are-teh-b.org (Postfix) with ESMTP id 5B24FEC5B0 for ; Mon, 22 Aug 2005 15:43:15 +0200 (CEST) From: Tim Daniel Schumacher To: gentoo-server@lists.gentoo.org Subject: Re: [gentoo-server] Restricted IRC Client Date: Mon, 22 Aug 2005 15:42:01 +0200 User-Agent: KMail/1.8.1 References: <4309C894.3010406@buanzo.com.ar> In-Reply-To: <4309C894.3010406@buanzo.com.ar> X-Face: "a(_-d^=H<}.?Ip!)/AUJ>f?;/+Swu6&smaI;B=?utf-8?q?=26v1c=7C7Rx9y=600aEs=26=5F=0A=09=249C=5FGr+ixF?=,Tat*Ec-ckK}1r Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-server@gentoo.org Reply-to: gentoo-server@lists.gentoo.org MIME-Version: 1.0 Content-Type: multipart/signed; boundary="nextPart1905938.4NuW4HrXLp"; protocol="application/pgp-signature"; micalg=pgp-sha1 Content-Transfer-Encoding: 7bit Message-Id: <200508221542.10827.tim@we-are-teh-b.org> X-Virus-Scanned: amavisd-new at we-are-teh-b.org X-Archives-Salt: 876ce1b4-54c5-4917-a260-9860efc474f6 X-Archives-Hash: 89cd54dd3777b3826abf70982c29d46a --nextPart1905938.4NuW4HrXLp Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline Hi Arturo, Am Montag, 22. August 2005 14:44 schrieb Arturo 'Buanzo' Busleiman: > People, I'm looking for a restricted irc client so I can provide an > outside user access to an IRC network. So, this guy would ssh/telnet to m= e, > and having hisuser set to an irc-client shell, automatically get the irc > client executed. So, why I need a restricted client (or sandbox/cage) is > now obvious. I've thought of different methods, but all of them have flaws > in my head, and I need your advice here. Do you realy need ssh/telnet? What about CGI:IRC[1]? It is a very flexible= =20 IRC-client written in perl for use on a homepage. In case of a consolebased IRC-client you might want to look at irssi[2], wh= ich=20 is very powerfull, but I realy don't know if it is possible to restrict=20 commands. To restrict them for gaining access to the rest of the filesystem= =20 you can use a chroot environment, I think there must be many howtos=20 describing this case. HTH Tim [1] http://cgiirc.sourceforge.net/ [2] http://www.irssi.org/ =2D-=20 http://we-are-teh-b.org/~tim/ --nextPart1905938.4NuW4HrXLp Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2-cvs (GNU/Linux) iQCVAwUAQwnWKVMoE2qWsjZwAQKU+AQAtNEbSIiMhWVdb8vPt/JulGbS+JekUX6V 5Y/UH58Bq84rK54Zws2WyETrZpJ6S+sAr55yYJ4KpHRcudVcETE9BWNw/aSNcN2J 351GwtfZ/0xtf7+o4RnNxNSxUQi0cP7Eh6aeAUR/paubg3ze7XdIqTbA8lg+lQXC /doQm4ifzPA= =4Q7V -----END PGP SIGNATURE----- --nextPart1905938.4NuW4HrXLp-- -- gentoo-server@gentoo.org mailing list