kevinreddot / forsh Goto Github PK

9.0 1.0 3.0 39 KB

Shell intended for forwarding-only ssh connection via jumphost

License: The Unlicense

Makefile 7.02% C 92.98%

ssh chroot-environment security jumphost

forsh's Issues

Make syslog facility configurable

Some sites use LOG_AUTH while others use LOG_AUTHPRIV or may want to have a local facility to be used with forsh.

Make it compile-time configurable.

Show help screen if run from shell

If accidentaly started by a logged-in user, forsh will log it as login attempt. It should detect this and just print help message.

Show login in log

Use getpwnam to log user name together with UID when loggin an interactive login.

Make username resolution configurable

getpwuid() requires /etc/nsswitch.conf, NSS libraries and, depending on NSS configuration, real /etc/passwd file available. If forsh is to be run in a chrooted environment, those files needs to be put there and always updated with the latest version. This complicates chroot environment setup and maintenance. On the other hand, getuid() call does not require any files and works fine even if no NSS-related files are available.

Make it configurable if forsh calls getpwuid for name resultion.

Recommend Projects