LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - General
User Name
Password
Linux - General This Linux forum is for general Linux questions and discussion.
If it is Linux Related and doesn't seem to fit in any other forum then this is the place.

Notices


Reply
  Search this Thread
Old 12-29-2004, 09:02 AM   #1
nistelrooy
Member
 
Registered: Oct 2003
Location: Singapore
Distribution: debian
Posts: 162

Rep: Reputation: 30
Implications when giving out a shell account to execute halflife server scripts


Hi

I'm new to linux and am still exploring.

I'm trying to move my halflife (counterstrike) game servers from windows over, so i could have my game admins to ssh into the server to execute commands to start/stop/querystatus/restart the game servers.

With my current knowledge, i could create new users, execute programs, run servers/services, etc...


Then couple of questions comes into my thoughts,
- What are the implications when i give out this shell account?
- I read about chroot, would it be safer to chroot the shell account and run my game servers from the chroot(ed) account?
- if you have experience with running halflife servers, how do i execute ./hlds_run <parameters>, so that this server goes into the background?



nistelrooy
 
Old 12-29-2004, 09:29 AM   #2
Technoslave
Member
 
Registered: Dec 2003
Location: Northern VA
Posts: 493

Rep: Reputation: 30
You potentially give access to someone who can be malicious. However, hopefully you know the person and they aren't a dick.

You can try chroot. I don't know if there have been any advances with in the past 6 months, but I know there were problems when trying to chroot someone using SSH to log in to the box, doing a google search on "chroot ssh" will give you more info.

I don't know of any parameters that will make it go in to the background, but you can put a & at the end of the command and it will go in to the background, I usually leave it in the foreground and that window open, that way if I don't have access to the HLDS program or whatever it's called ( let's you remotely admin the server if you have the rcon passwd ) I can just go back to that window and type in the commands. If you don't start the game on the server box itself, look in to using a command called screen
 
Old 12-29-2004, 09:32 AM   #3
scuzzman
Senior Member
 
Registered: May 2004
Location: Hilliard, Ohio, USA
Distribution: Slackware, Kubuntu
Posts: 1,851

Rep: Reputation: 47
Re: Implications when giving out a shell account to execute halflife server scripts

Quote:
Originally posted by nistelrooy
Hi

I'm new to linux and am still exploring.

I'm trying to move my halflife (counterstrike) game servers from windows over, so i could have my game admins to ssh into the server to execute commands to start/stop/querystatus/restart the game servers.

With my current knowledge, i could create new users, execute programs, run servers/services, etc...


Then couple of questions comes into my thoughts,
- What are the implications when i give out this shell account?
- I read about chroot, would it be safer to chroot the shell account and run my game servers from the chroot(ed) account?
- if you have experience with running halflife servers, how do i execute ./hlds_run <parameters>, so that this server goes into the background?



nistelrooy
1) Implications: security: just dont run it as root and you should be fine, but only give the shell acct to people you know and trust
2) chroot: I don't know about this... you shouldn't need to
3:
Code:
$./hlds_run PARAMS &
Note the & - it tells the shell to run it in the background
 
Old 12-29-2004, 09:54 AM   #4
nistelrooy
Member
 
Registered: Oct 2003
Location: Singapore
Distribution: debian
Posts: 162

Original Poster
Rep: Reputation: 30
Technoslave and scuzzman,

Thanks for your prompt response and the information.
I'll search up online calling back the background program.


Since chroot sshd is going to give me some headaches against malicious root-hackers, bleh. I would rather go for virtualisation as advised from the websites.


Anyway, I was browsing online for ways of limiting the user from accessing other directories such as /usr, /etc, /dev, etc... Not much of luck here.

QN #2
Is it possible to allow users to have only their directory access /home/user, and not allowing them to have other directory access (such as read or writing).
(e.g. deny all, allow only)


nistelrooy

Last edited by nistelrooy; 12-29-2004 at 09:56 AM.
 
Old 02-24-2006, 12:00 AM   #5
cramer
Member
 
Registered: Feb 2006
Distribution: Red Hat 9
Posts: 112

Rep: Reputation: 15
Running hlds in the background:
Example of a counter-strike 1.6 game.
Code:
./hlds_run -game cstrike +map de_dust +maxplayers 20 > /dev/null &
Using "> /dev/null &" Sends the output to the linux "trash can" and runs the process in the background.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
execute shell-scripts at kde startup supersucker Linux - Newbie 10 10-28-2005 10:47 AM
Shell Server Project Scripts blueCow Linux - General 8 04-12-2005 08:08 PM
Execute Shell Scripts on startup dragoroberto Linux - Software 9 02-28-2005 08:46 AM
how to execute shell scripts from cgi script rajatgarg Linux - General 1 07-08-2004 01:39 PM
How to get Konqueror to execute shell scripts in a new console on double click nitrambass Mandriva 0 06-22-2004 10:38 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - General

All times are GMT -5. The time now is 01:07 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration