Diskussion:Shellinabox/Sicherheit: Unterschied zwischen den Versionen
Die Seite wurde neu angelegt: „Das war's. [https://www.smarthomebeginner.com/install-shellinabox-on-ubuntu/ Install Shellinabox] und befolgen Sie die oben genannten Schritte, um die Sicherheit von Shellinabox zu erhöhen * Genießen Sie die Bequemlichkeit des webbasierten Terminalemulators {{InfoBox stack |{{InfoBox homepage|https://github.com/shellinabox/shellinabox|header=true}} |{{InfoBox package|www-misc/shellinabox}} }} {{c|shellinabox}} Article description::allows access to…“ |
K Textersetzung - „ “ durch „ “ |
||
| (2 dazwischenliegende Versionen desselben Benutzers werden nicht angezeigt) | |||
| Zeile 77: | Zeile 77: | ||
After the service is running, open a web browser to the IP address of the system and port <code>4200</code>: | After the service is running, open a web browser to the IP address of the system and port <code>4200</code>: | ||
{{Cmd|firefox <nowiki> | {{Cmd|firefox <nowiki>https://localhost:4200</nowiki>}} | ||
=== Invocation === | === Invocation === | ||
| Zeile 86: | Zeile 86: | ||
List of command line options: | List of command line options: | ||
-b, --background[=PIDFILE] run in background | |||
-c, --cert=CERTDIR set certificate dir (default: $PWD) | |||
--cert-fd=FD set certificate file from fd | |||
--css=FILE attach contents to CSS style sheet | |||
--cgi[=PORTMIN-PORTMAX] run as CGI | |||
-d, --debug enable debug mode | |||
-f, --static-file=URL:FILE serve static file from URL path | |||
-g, --group=GID switch to this group (default: nogroup) | |||
-h, --help print this message | |||
--linkify=[none|normal|aggressive] default is "normal" | |||
--localhost-only only listen on 127.0.0.1 | |||
--no-beep suppress all audio output | |||
-n, --numeric do not resolve hostnames | |||
-m, --messages-origin=ORIGIN allow iframe message passing from origin | |||
--pidfile=PIDFILE publish pid of daemon process | |||
-p, --port=PORT select a port (default: 4200) | |||
-s, --service=SERVICE define one or more services | |||
-t, --disable-ssl disable transparent SSL support | |||
--disable-ssl-menu disallow changing transport mode | |||
--disable-utmp-logging disable logging to utmp and wtmp | |||
-q, --quiet turn off all messages | |||
--unixdomain-only=PATH:USER:GROUP:CHMOD listen on unix socket | |||
-u, --user=UID switch to this user (default: nobody) | |||
--user-css=STYLES defines user-selectable CSS options | |||
-v, --verbose enable logging messages | |||
--version prints version information | |||
--disable-peer-check disable peer check on a session | |||
Debug, quiet, and verbose are mutually exclusive. | Debug, quiet, and verbose are mutually exclusive. | ||
| Zeile 118: | Zeile 118: | ||
One or more --service arguments define services that should be made available | One or more --service arguments define services that should be made available | ||
through the web interface: | through the web interface: | ||
SERVICE := <url-path> ':' APP | |||
APP := 'LOGIN' | 'SSH' [ : <host> ] | USER ':' CWD ':' CMD | |||
USER := 'AUTH' | <username> ':' <groupname> | |||
CWD := 'HOME' | <dir> | |||
CMD := 'SHELL' | <cmdline copy> | |||
<cmdline> supports variable expansion: | <cmdline copy> supports variable expansion: | ||
${columns} - number of columns | |||
${gid} - gid id | |||
${group} - group name | |||
${home} - home directory | |||
${lines} - number of rows | |||
${peer} - name of remote peer | |||
${realip} - value of HTTP header field 'X-Real-IP' | |||
${uid} - user id | |||
${url} - the URL that serves the terminal session | |||
${user} - user name | |||
One or more --user-css arguments define optional user-selectable CSS options. | One or more --user-css arguments define optional user-selectable CSS options. | ||
These options show up in the right-click context menu: | These options show up in the right-click context menu: | ||
STYLES := GROUP { ';' GROUP }* | |||
GROUP := OPTION { ',' OPTION }* | |||
OPTION := <label> ':' [ '-' | '+' ] <css-file> | |||
OPTIONs that make up a GROUP are mutually exclusive. But individual GROUPs are | OPTIONs that make up a GROUP are mutually exclusive. But individual GROUPs are | ||
Aktuelle Version vom 14. Juni 2026, 00:49 Uhr
Das war's. Install Shellinabox und befolgen Sie die oben genannten Schritte, um die Sicherheit von Shellinabox zu erhöhen
- Genießen Sie die Bequemlichkeit des webbasierten Terminalemulators
Vorlage:C Article description::allows access to the command-line from web based terminal emulator. It is useful for web-based administrator access to a system. It is accessible to any JavaScript and CSS enabled web browser and does not require any additional browser plugins.[1].
Installation
USE flags
Emerge
Configuration
Securing the connection
The default configuration exposes a login shell with SSL disabled on the localhost interface only.
Information about the procedure for generating self-signed SSL certificates is explained here.
To generate an SSL certificate for use shellinabox the following commands can be issued:
For Gentoo user convenience, the ebuild maintainer has provided the above commands in a file located here: Vorlage:Path
This script can simply be executed in order to generate the SSL certificate:
Service
OpenRC
Add the service to the default runlevel:
Start the service now:
systemd
To start the service at boot:
Start the service now:
Usage
After the service is running, open a web browser to the IP address of the system and port 4200:
Invocation
Removal
Unmerge
See also
External resources
- https://www.unixmen.com/shellinabox-a-web-based-ajax-terminal-emulator/ - A guide on setting up shellinabox.