diff options
| author | Donald Sharp <sharpd@cumulusnetworks.com> | 2015-08-13 01:11:07 +0200 |
|---|---|---|
| committer | Donald Sharp <sharpd@cumulusnetworks.com> | 2015-08-13 01:11:07 +0200 |
| commit | 576b6b5d185b3add33a465a5485abe94fe927d60 (patch) | |
| tree | 39d9f74b40d4ead87a8f79a4288f4bd7dde3ad1a /vtysh | |
| parent | Replace lists with arrays to store read and write threads (diff) | |
| download | frr-576b6b5d185b3add33a465a5485abe94fe927d60.tar.xz frr-576b6b5d185b3add33a465a5485abe94fe927d60.zip | |
Quagga: Restrict Shell Access
Ticket: CM-6926
Reviewed By: CCR-3328
Tested: See bug
Restrict Shell access to those people who intentionally turn it on.
As that it can be used as a exploit to elevate permissions
Diffstat (limited to 'vtysh')
| -rw-r--r-- | vtysh/vtysh.c | 8 |
1 files changed, 7 insertions, 1 deletions
diff --git a/vtysh/vtysh.c b/vtysh/vtysh.c index d134c027b..5d8d319f5 100644 --- a/vtysh/vtysh.c +++ b/vtysh/vtysh.c @@ -2319,6 +2319,7 @@ DEFUN (vtysh_traceroute6, } #endif +#if defined(HAVE_SHELL_ACCESS) DEFUN (vtysh_telnet, vtysh_telnet_cmd, "telnet WORD", @@ -2378,6 +2379,7 @@ DEFUN (vtysh_start_zsh, execute_command ("zsh", 0, NULL, NULL); return CMD_SUCCESS; } +#endif static void vtysh_install_default (enum node_type node) @@ -2808,9 +2810,11 @@ vtysh_init_vty (void) install_element (VIEW_NODE, &vtysh_ping6_cmd); install_element (VIEW_NODE, &vtysh_traceroute6_cmd); #endif +#if defined(HAVE_SHELL_ACCESS) install_element (VIEW_NODE, &vtysh_telnet_cmd); install_element (VIEW_NODE, &vtysh_telnet_port_cmd); install_element (VIEW_NODE, &vtysh_ssh_cmd); +#endif install_element (ENABLE_NODE, &vtysh_ping_cmd); install_element (ENABLE_NODE, &vtysh_ping_ip_cmd); install_element (ENABLE_NODE, &vtysh_traceroute_cmd); @@ -2819,13 +2823,15 @@ vtysh_init_vty (void) install_element (ENABLE_NODE, &vtysh_ping6_cmd); install_element (ENABLE_NODE, &vtysh_traceroute6_cmd); #endif +#if defined(HAVE_SHELL_ACCESS) install_element (ENABLE_NODE, &vtysh_telnet_cmd); install_element (ENABLE_NODE, &vtysh_telnet_port_cmd); install_element (ENABLE_NODE, &vtysh_ssh_cmd); install_element (ENABLE_NODE, &vtysh_start_shell_cmd); install_element (ENABLE_NODE, &vtysh_start_bash_cmd); install_element (ENABLE_NODE, &vtysh_start_zsh_cmd); - +#endif + install_element (VIEW_NODE, &vtysh_show_memory_cmd); install_element (ENABLE_NODE, &vtysh_show_memory_cmd); |