Re: [Jailkit-users] scp problem with jailkit

[Olivier Sessink]

On 10-03-16 14:45, Johan Söderberg wrote:

After adding "allow_word_expansion = 1" to the two groups I have in jk_lsh.ini it started working. So I think the bug is the other way around. The original jk_lsh.ini file looked like this:

[group grp1]

paths= /usr/bin, /usr/lib/

executables= /usr/bin/scp, /usr/libexec/openssh/sftp-server

[group grp2]

paths= /usr/bin, /usr/lib/

executables= /usr/bin/scp, /usr/libexec/openssh/sftp-server

With the above configuration and if allowed_word_expansion is by default 0 it still let's users who are members of the group grp1 to run scp with wildcards.

I found the biggest part of the bug, if the setting was missing, the option was not correctly disabled. I don't understand why it was disabled for your group grp2. So this still puzzles me. I cannot reproduce that on my testsystem.

Olivier

-- 
Bluefish website http://bluefish.openoffice.nl/
Blog http://oli4444.wordpress.com/