Zum Inhalt springen

Diskussion:Shellinabox/Sicherheit: Unterschied zwischen den Versionen

Aus Foxwiki
Die Seite wurde neu angelegt: „Das war's. [https://www.smarthomebeginner.com/install-shellinabox-on-ubuntu/ Install Shellinabox] und befolgen Sie die oben genannten Schritte, um die Sicherheit von Shellinabox zu erhöhen * Genießen Sie die Bequemlichkeit des webbasierten Terminalemulators {{InfoBox stack |{{InfoBox homepage|https://github.com/shellinabox/shellinabox|header=true}} |{{InfoBox package|www-misc/shellinabox}} }} {{c|shellinabox}} Article description::allows access to…“
 
K Textersetzung - „ “ durch „ “
 
(2 dazwischenliegende Versionen desselben Benutzers werden nicht angezeigt)
Zeile 77: Zeile 77:
After the service is running, open a web browser to the IP address of the system and port <code>4200</code>:
After the service is running, open a web browser to the IP address of the system and port <code>4200</code>:


{{Cmd|firefox <nowiki>http://localhost:4200</nowiki>}}
{{Cmd|firefox <nowiki>https://localhost:4200</nowiki>}}


=== Invocation ===
=== Invocation ===
Zeile 86: Zeile 86:


List of command line options:
List of command line options:
  -b, --background[=PIDFILE] run in background
-b, --background[=PIDFILE] run in background
  -c, --cert=CERTDIR         set certificate dir (default: $PWD)
-c, --cert=CERTDIR     set certificate dir (default: $PWD)
      --cert-fd=FD           set certificate file from fd
  --cert-fd=FD     set certificate file from fd
      --css=FILE             attach contents to CSS style sheet
  --css=FILE       attach contents to CSS style sheet
      --cgi[=PORTMIN-PORTMAX] run as CGI
  --cgi[=PORTMIN-PORTMAX] run as CGI
  -d, --debug                 enable debug mode
-d, --debug         enable debug mode
  -f, --static-file=URL:FILE serve static file from URL path
-f, --static-file=URL:FILE serve static file from URL path
  -g, --group=GID             switch to this group (default: nogroup)
-g, --group=GID       switch to this group (default: nogroup)
  -h, --help                 print this message
-h, --help         print this message
      --linkify=[none|normal|aggressive] default is "normal"
  --linkify=[none|normal|aggressive] default is "normal"
      --localhost-only       only listen on 127.0.0.1
  --localhost-only   only listen on 127.0.0.1
      --no-beep               suppress all audio output
  --no-beep       suppress all audio output
  -n, --numeric               do not resolve hostnames
-n, --numeric       do not resolve hostnames
  -m, --messages-origin=ORIGIN allow iframe message passing from origin
-m, --messages-origin=ORIGIN allow iframe message passing from origin
      --pidfile=PIDFILE       publish pid of daemon process
  --pidfile=PIDFILE   publish pid of daemon process
  -p, --port=PORT             select a port (default: 4200)
-p, --port=PORT       select a port (default: 4200)
  -s, --service=SERVICE       define one or more services
-s, --service=SERVICE   define one or more services
  -t, --disable-ssl           disable transparent SSL support
-t, --disable-ssl     disable transparent SSL support
      --disable-ssl-menu     disallow changing transport mode
  --disable-ssl-menu   disallow changing transport mode
      --disable-utmp-logging disable logging to utmp and wtmp
  --disable-utmp-logging disable logging to utmp and wtmp
  -q, --quiet                 turn off all messages
-q, --quiet         turn off all messages
      --unixdomain-only=PATH:USER:GROUP:CHMOD listen on unix socket
  --unixdomain-only=PATH:USER:GROUP:CHMOD listen on unix socket
  -u, --user=UID             switch to this user (default: nobody)
-u, --user=UID       switch to this user (default: nobody)
      --user-css=STYLES       defines user-selectable CSS options
  --user-css=STYLES   defines user-selectable CSS options
  -v, --verbose               enable logging messages
-v, --verbose       enable logging messages
      --version               prints version information
  --version       prints version information
      --disable-peer-check   disable peer check on a session
  --disable-peer-check disable peer check on a session


Debug, quiet, and verbose are mutually exclusive.
Debug, quiet, and verbose are mutually exclusive.
Zeile 118: Zeile 118:
One or more --service arguments define services that should be made available
One or more --service arguments define services that should be made available
through the web interface:
through the web interface:
  SERVICE := <url-path> ':' APP
SERVICE := <url-path> ':' APP
   APP    := 'LOGIN' | 'SSH' [ : <host> ] | USER ':' CWD ':' CMD
APP   := 'LOGIN' | 'SSH' [ : <host> ] | USER ':' CWD ':' CMD
  USER   := 'AUTH' | <username> ':' <groupname>
USER := 'AUTH' | <username> ':' <groupname>
   CWD    := 'HOME' | <dir>
CWD   := 'HOME' | <dir>
   CMD    := 'SHELL' | <cmdline>
CMD   := 'SHELL' | <cmdline copy>


<cmdline> supports variable expansion:
<cmdline copy> supports variable expansion:
  ${columns} - number of columns
${columns} - number of columns
  ${gid}     - gid id
${gid}   - gid id
  ${group}   - group name
${group} - group name
  ${home}   - home directory
${home} - home directory
  ${lines}   - number of rows
${lines} - number of rows
  ${peer}   - name of remote peer
${peer} - name of remote peer
  ${realip} - value of HTTP header field 'X-Real-IP'
${realip} - value of HTTP header field 'X-Real-IP'
  ${uid}     - user id
${uid}   - user id
  ${url}     - the URL that serves the terminal session
${url}   - the URL that serves the terminal session
  ${user}   - user name
${user} - user name


One or more --user-css arguments define optional user-selectable CSS options.
One or more --user-css arguments define optional user-selectable CSS options.
These options show up in the right-click context menu:
These options show up in the right-click context menu:
  STYLES := GROUP { ';' GROUP }*
STYLES := GROUP { ';' GROUP }*
  GROUP   := OPTION { ',' OPTION }*
GROUP := OPTION { ',' OPTION }*
  OPTION := <label> ':' [ '-' | '+' ] <css-file>
OPTION := <label> ':' [ '-' | '+' ] <css-file>


OPTIONs that make up a GROUP are mutually exclusive. But individual GROUPs are
OPTIONs that make up a GROUP are mutually exclusive. But individual GROUPs are

Aktuelle Version vom 14. Juni 2026, 00:49 Uhr

Das war's. Install Shellinabox und befolgen Sie die oben genannten Schritte, um die Sicherheit von Shellinabox zu erhöhen

  • Genießen Sie die Bequemlichkeit des webbasierten Terminalemulators


Vorlage:InfoBox stack

Vorlage:C Article description::allows access to the command-line from web based terminal emulator. It is useful for web-based administrator access to a system. It is accessible to any JavaScript and CSS enabled web browser and does not require any additional browser plugins.[1].

Vorlage:Warning

Installation

USE flags

Vorlage:USEflag

Emerge

Vorlage:Emerge

Configuration

Securing the connection

The default configuration exposes a login shell with SSL disabled on the localhost interface only.

Information about the procedure for generating self-signed SSL certificates is explained here.

To generate an SSL certificate for use shellinabox the following commands can be issued:

Vorlage:RootCmd

For Gentoo user convenience, the ebuild maintainer has provided the above commands in a file located here: Vorlage:Path

This script can simply be executed in order to generate the SSL certificate:

Vorlage:RootCmd

Service

OpenRC

Add the service to the default runlevel:

Vorlage:RootCmd

Start the service now:

Vorlage:RootCmd

systemd

To start the service at boot:

Vorlage:RootCmd

Start the service now:

Vorlage:RootCmd

Usage

After the service is running, open a web browser to the IP address of the system and port 4200:

Vorlage:Cmd

Invocation

Vorlage:RootInvocation

Removal

Unmerge

Vorlage:Unmerge

See also

External resources

References

Vorlage:Reflist