Jump to content


Photo

OWIF and /usr/bin/shellinaboxd


  • Please log in to reply
5 replies to this topic

#1 anudanan

  • Senior Member
  • 1,185 posts

+16
Neutral

Posted 17 January 2019 - 17:22

A vti enigma user which a know from the vti forum has now tested openpli because of some problems with the vti images on some HD+ channels. 

I ask me where he can found the terminal window in OWIF on openpli

 

I´ve never seen a terminal window on my openpli boxes but after looking the source code of OWIF I´ve seen the terminal window is available if /usr/bin/shellinaboxd exists. 

Have the openpli team known this OWIF feature but not included it because of some security risks for exampe having  access to the CLI over OWIF?

 

For me I don´t miss it because a connection over ssh is usefull enough

 


Receiver:2 x Uno4k SE (PLI 7.3 rel), 1 x ET9200 (PLI 4.0), NAS: 2 x QNAP 410, TV: LG 65C8llla, LG 47LB570V, LG 42LM615S, Sound: Yamaha RX-v663, Teufel System 5 THX


Re: OWIF and /usr/bin/shellinaboxd #2 WanWizard

  • PLi® Core member
  • 68,309 posts

+1,719
Excellent

Posted 17 January 2019 - 17:55

I didn't even know it was there, but you have a point, the only reason for it being there is shell access via http, which in turn is only if you have exposed OWIF to a network (i.e. internet) but have not exposed shell access.

 

So my 2ct: leave it like this, adding it makes OWIF even more insecure.


Currently in use: VU+ Duo 4K (2xFBC S2), VU+ Solo 4K (1xFBC S2), uClan Usytm 4K Pro (S2+T2), Octagon SF8008 (S2+T2), Zgemma H9.2H (S2+T2)

Due to my bad health, I will not be very active at times and may be slow to respond. I will not read the forum or PM on a regular basis.

Many answers to your question can be found in our new and improved wiki.


Re: OWIF and /usr/bin/shellinaboxd #3 anudanan

  • Senior Member
  • 1,185 posts

+16
Neutral

Posted 17 January 2019 - 17:59

I agree. 


Receiver:2 x Uno4k SE (PLI 7.3 rel), 1 x ET9200 (PLI 4.0), NAS: 2 x QNAP 410, TV: LG 65C8llla, LG 47LB570V, LG 42LM615S, Sound: Yamaha RX-v663, Teufel System 5 THX


Re: OWIF and /usr/bin/shellinaboxd #4 Pr2

  • PLi® Contributor
  • 6,046 posts

+256
Excellent

Posted 17 January 2019 - 18:03

Hi,

 

Normally it was planned to add it in OpenPLi:

 

https://forums.openp...t-client/page-2

 

This can really ease end-user life when needing to access the box in telnet to type some command.

 

Pr2


NO SUPPORT by PM, it is a forum make your question public so everybody can benefit from the question/answer.
If you think that my answer helps you, you can press the up arrow in bottom right of the answer.

Wanna help with OpenPLi Translation? Please read our Wiki Information for translators

Sat: Hotbird 13.0E, Astra 19.2E, Eutelsat5A 5.0W
VU+ Solo 4K: 2*DVB-S2 + 2*DVB-C/T/T2 (used in DVB-C) & Duo 4K: 2*DVB-S2X + DVB-C (FBC)

AB-Com: PULSe 4K 1*DVB-S2X (+ DVB-C/T/T2)
Edision OS Mio 4K: 1*DVB-S2X + 1*DVB-C/T/T2
 


Re: OWIF and /usr/bin/shellinaboxd #5 anudanan

  • Senior Member
  • 1,185 posts

+16
Neutral

Posted 17 January 2019 - 18:10

But a specialist don´t need it, so it must be switchable or shellinabox is an installable/uninstallable plugin 


Receiver:2 x Uno4k SE (PLI 7.3 rel), 1 x ET9200 (PLI 4.0), NAS: 2 x QNAP 410, TV: LG 65C8llla, LG 47LB570V, LG 42LM615S, Sound: Yamaha RX-v663, Teufel System 5 THX


Re: OWIF and /usr/bin/shellinaboxd #6 WanWizard

  • PLi® Core member
  • 68,309 posts

+1,719
Excellent

Posted 17 January 2019 - 18:10

I am happy it hasn't been done.

 

If end-users don't have the skills to access the commandline using telnet or ssh, we should not give them other options to f'up.

 

And then I'm not even mentioning the fact that all internet exposed OWIF's will not have to be hacked anymore, as they will conveniently already provide a CLI.


Currently in use: VU+ Duo 4K (2xFBC S2), VU+ Solo 4K (1xFBC S2), uClan Usytm 4K Pro (S2+T2), Octagon SF8008 (S2+T2), Zgemma H9.2H (S2+T2)

Due to my bad health, I will not be very active at times and may be slow to respond. I will not read the forum or PM on a regular basis.

Many answers to your question can be found in our new and improved wiki.



0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users