shellinbox running problem error

niteen · 11-15-2014, 12:43 PM

hi all,

i am trying to make my linux terminal available on browser.i have found one link
http://code.google.com/p/shellinabox/

but it's not running, giving error as below.

[root@CENTOS shellinabox-2.14]# shellinaboxd
Cannot read valid certificate from "certificate.pem". Check file permissions and file format.

please assist me.

--
thanks in advance

unSpawn · 11-15-2014, 07:43 PM

Well, did you check the file ownership, permissions and format of the PEM file? What are they? What does the documentation say they should be?

niteen · 11-16-2014, 08:50 AM

well it's all about SSL certification, so i found the way of running it without it. posting the command as below

<code>
/usr/local/bin/shellinaboxd --disable-ssl -b
</code>

i have one more query left.if anyone,

how to make shellinbox to be restricted of running for a single user only.
Actually, if anyone has root access, he can access full privileged. so i want to make it restricted.

Manual
======
https://code.google.com/p/shellinabo...ellinaboxd_man

Thanks in Advance

unSpawn · 11-16-2014, 10:38 AM

Quote:

Originally Posted by niteen

well it's all about SSL certification, so i found the way of running it without it.

So instead of providing an extra layer of security and learning something in the process you disabled it?..

Quote:

Originally Posted by niteen

how to make shellinbox to be restricted of running for a single user only. Actually, if anyone has root access, he can access full privileged. so i want to make it restricted.

Ensure syslog is configured properly. Create an unprivileged user account. Ensure it has a strong password. If your Linux distribution uses PAM then limit remote access in /etc/security/access.conf. Ensure the user can log in over SSH with pubkey auth only. Set the forced command to the script starting / stopping shellinboxd. Limit remote access to the port shellinboxd runs on in the firewall. Now run shellinboxd as that unprivileged user.

niteen · 11-17-2014, 03:44 AM

Dear unSpawn,

it's tough to set restriction at '/etc/security/access.conf' level, because the same IP can use root-user via putty and all.
but i want to restrict it via web browser. Due to larger security loop holes as found in web browsers.

Anyone from having shellinbox library knowledge, kindly assist me.