Hi. How do I prevent any user logging onto my system from getting into fs_cli -- they could shut down the whole system if they wanted to. Can I set a password, only allow root to get in, or what? Thanks in advance for any ideas. -- Your life is like a penny. You're going to lose it. The question is: How do you spend it? John Covici covici@ccs.covici.com
http://wiki.freeswitch.org/wiki/Fs_cli 2010. szeptember 6. 07:44:01 dátummal covici@ccs.covici.com az alábbiakat írta:
Hi. How do I prevent any user logging onto my system from getting into fs_cli -- they could shut down the whole system if they wanted to. Can I set a password, only allow root to get in, or what?
Thanks in advance for any ideas.
You can set the password in conf/autoload_configs/event_socket.conf.xml 2010. szeptember 6. 08:04:12 dátummal Puskás Zsolt az alábbiakat írta:
http://wiki.freeswitch.org/wiki/Fs_cli
2010. szeptember 6. 07:44:01 dátummal covici@ccs.covici.com az alábbiakat
írta:
Hi. How do I prevent any user logging onto my system from getting into fs_cli -- they could shut down the whole system if they wanted to. Can I set a password, only allow root to get in, or what?
Thanks in advance for any ideas.
Configuring the listen-ip to localhost and/or setting up suitable firewall rules might also be a good idea... Best regards / Mit freundlichen Grüßen, Daniel Neubert On 06.09.2010 08:10, Puskás Zsolt wrote:
You can set the password in conf/autoload_configs/event_socket.conf.xml
2010. szeptember 6. 08:04:12 dátummal Puskás Zsolt az alábbiakat írta:
http://wiki.freeswitch.org/wiki/Fs_cli
2010. szeptember 6. 07:44:01 dátummal covici@ccs.covici.com az alábbiakat
írta:
Hi. How do I prevent any user logging onto my system from getting into fs_cli -- they could shut down the whole system if they wanted to. Can I set a password, only allow root to get in, or what?
Thanks in advance for any ideas.
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Remember to make sure only root & the freeswitch user can read the config file, otherwise they'll be able to find out the password and log in anyway. Or you can move the config files onto another server using mod_xml_curl ( http://wiki.freeswitch.org/wiki/Mod_xml_curl) -Steve On 6 September 2010 08:24, Daniel Neubert <daniel.neubert@solomo.de> wrote:
Configuring the listen-ip to localhost and/or setting up suitable firewall rules might also be a good idea...
Best regards / Mit freundlichen Grüßen, Daniel Neubert
On 06.09.2010 08:10, Puskás Zsolt wrote:
You can set the password in conf/autoload_configs/event_socket.conf.xml
2010. szeptember 6. 08:04:12 dátummal Puskás Zsolt az alábbiakat írta:
http://wiki.freeswitch.org/wiki/Fs_cli
2010. szeptember 6. 07:44:01 dátummal covici@ccs.covici.com az alábbiakat
írta:
Hi. How do I prevent any user logging onto my system from getting into fs_cli -- they could shut down the whole system if they wanted to. Can I set a password, only allow root to get in, or what?
Thanks in advance for any ideas.
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Good point -- thanks. Steven Ayre <steveayre@gmail.com> wrote:
Remember to make sure only root & the freeswitch user can read the config file, otherwise they'll be able to find out the password and log in anyway.
Or you can move the config files onto another server using mod_xml_curl ( http://wiki.freeswitch.org/wiki/Mod_xml_curl)
-Steve
On 6 September 2010 08:24, Daniel Neubert <daniel.neubert@solomo.de> wrote:
Configuring the listen-ip to localhost and/or setting up suitable firewall rules might also be a good idea...
Best regards / Mit freundlichen Grüßen, Daniel Neubert
On 06.09.2010 08:10, Puskás Zsolt wrote:
You can set the password in conf/autoload_configs/event_socket.conf.xml
2010. szeptember 6. 08:04:12 dátummal Puskás Zsolt az alábbiakat írta:
http://wiki.freeswitch.org/wiki/Fs_cli
2010. szeptember 6. 07:44:01 dátummal covici@ccs.covici.com az alábbiakat
írta:
Hi. How do I prevent any user logging onto my system from getting into fs_cli -- they could shut down the whole system if they wanted to. Can I set a password, only allow root to get in, or what?
Thanks in advance for any ideas.
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
---------------------------------------------------- Alternatives:
---------------------------------------------------- _______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Your life is like a penny. You're going to lose it. The question is: How do you spend it? John Covici covici@ccs.covici.com
OK, that did work, with the possible security hole that it does not prompt for the password -- you need it on the command line. Thanks much. Puskás Zsolt <errotan@elder.hu> wrote:
http://wiki.freeswitch.org/wiki/Fs_cli
2010. szeptember 6. 07:44:01 dátummal covici@ccs.covici.com az alábbiakat írta:
Hi. How do I prevent any user logging onto my system from getting into fs_cli -- they could shut down the whole system if they wanted to. Can I set a password, only allow root to get in, or what?
Thanks in advance for any ideas.
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Your life is like a penny. You're going to lose it. The question is: How do you spend it? John Covici covici@ccs.covici.com
Security hole? Don't know about you but I don't let users in my freeswitch boxes in the first place... If they have a shell chances are they can already own the box anyway!!!! /b Sent from my iPhone cruising at 35,000 ft gogo baby! On Sep 6, 2010, at 5:49 AM, covici@ccs.covici.com wrote:
OK, that did work, with the possible security hole that it does not prompt for the password -- you need it on the command line.
Thanks much.
Puskás Zsolt <errotan@elder.hu> wrote:
http://wiki.freeswitch.org/wiki/Fs_cli
2010. szeptember 6. 07:44:01 dátummal covici@ccs.covici.com az alábbiakat írta:
Hi. How do I prevent any user logging onto my system from getting into fs_cli -- they could shut down the whole system if they wanted to. Can I set a password, only allow root to get in, or what?
Thanks in advance for any ideas.
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Your life is like a penny. You're going to lose it. The question is: How do you spend it?
John Covici covici@ccs.covici.com
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
35,000 ft? nice... ;) Regards HASSAN On Mon, Sep 6, 2010 at 18:43, Brian West <brian@freeswitch.org> wrote:
Security hole? Don't know about you but I don't let users in my freeswitch boxes in the first place... If they have a shell chances are they can already own the box anyway!!!!
/b Sent from my iPhone cruising at 35,000 ft gogo baby!
On Sep 6, 2010, at 5:49 AM, covici@ccs.covici.com wrote:
OK, that did work, with the possible security hole that it does not prompt for the password -- you need it on the command line.
Thanks much.
Puskás Zsolt <errotan@elder.hu> wrote:
http://wiki.freeswitch.org/wiki/Fs_cli
2010. szeptember 6. 07:44:01 dátummal covici@ccs.covici.com az alábbiakat írta:
Hi. How do I prevent any user logging onto my system from getting into fs_cli -- they could shut down the whole system if they wanted to. Can I set a password, only allow root to get in, or what?
Thanks in advance for any ideas.
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Your life is like a penny. You're going to lose it. The question is: How do you spend it?
John Covici covici@ccs.covici.com
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Yes was on American Airlines Flight 1322 from DFW to DTW ;) /b On Sep 6, 2010, at 9:25 AM, Nyamul Hassan wrote:
35,000 ft? nice... ;)
Regards HASSAN
On Mon, Sep 6, 2010 at 18:43, Brian West <brian@freeswitch.org> wrote: Security hole? Don't know about you but I don't let users in my freeswitch boxes in the first place... If they have a shell chances are they can already own the box anyway!!!!
/b Sen
participants (6)
-
Brian West
-
covici@ccs.covici.com
-
Daniel Neubert
-
Nyamul Hassan
-
Puskás Zsolt
-
Steven Ayre