News for hackers. Stuff that matters.

A comment on Devzat – Chat over SSH, with some nice quality-of-life features. Parent comment

Re:Devzat – Chat over SSH, with some nice quality-of-life fe... by jagged-chisel on Thursday July 18, 2024 @05:03PM (#40999725)
Spoiler: set the user’s shell to any old binary, like a chat app.
[ Parent | on HN ]
Re:Devzat – Chat over SSH, with some nice quality-of-life fe... by semi-extrinsic on Thursday July 18, 2024 @06:27PM (#41000334)
Or in the authorized_keys file, prepend the public key with a specified command. This is then the only command that the user can execute when logging in with that particular key. To wit:

  command="/usr/bin/foo" ssh-ed25519 AAAA....
[ Parent | on HN ]
Re:Devzat – Chat over SSH, with some nice quality-of-life fe... by titaniumtown on Thursday July 18, 2024 @07:47PM (#41000815)
i had no idea about that, thank you!
[ Parent | on HN ]
Re:Devzat – Chat over SSH, with some nice quality-of-life fe... by kijin on Thursday July 18, 2024 @08:22PM (#41000983)
I suppose this will also lock the user out of sftp and scp? Because otherwise they might be able to edit the authorized_keys file and run any command.
[ Parent | on HN ]
Re:Devzat – Chat over SSH, with some nice quality-of-life fe... by gerdesj on Thursday July 18, 2024 @08:58PM (#41001192)
"I suppose this will also lock the user out of sftp and scp?"

No it wont! The specified command might provide sftp, scp, telnet or stream a film.

[ Parent | on HN ]
Re:Devzat – Chat over SSH, with some nice quality-of-life fe... by fragmede on Friday July 19, 2024 @01:41AM (#41002253)
I stream a film at funky.nondeterministic.computer on port 22
[ Parent | on HN ]
Re:Devzat – Chat over SSH, with some nice quality-of-life fe... by rovr138 on Friday July 19, 2024 @12:49PM (#41008406)
hah

made me laugh

[ Parent | on HN ]
Re:Devzat – Chat over SSH, with some nice quality-of-life fe... by fragmede on Friday July 19, 2024 @01:40AM (#41002245)
I'd recommend using https://github.com/gliderlabs/ssh instead, no chance of some shell escape that way.
[ Parent | on HN ]
Re:Devzat – Chat over SSH, with some nice quality-of-life fe... by quackduck on Friday July 19, 2024 @02:22AM (#41002434)
I use a fork of that!
[ Parent | on HN ]