rssh is a restricted shell for use with OpenSSH, allowing only scp and/or sftp.
It now also includes support for rdist, rsync, and CVS. For example, if you
have a server which you only want to allow users to copy files off of via scp,
without providing shell access, you can use rssh to do that.
WWW: http://www.pizzashack.org/rssh/index.shtml
===> The following configuration options are available for rssh-2.3.4_2:
RDIST=off: rdist support
RSYNC3=off: rsync3 support (Debian patch)
===> Use 'make config' to modify these settings
shells/rssh: Mark as deprecated and set to expire
Upstream has officially abandoned the port some time ago and the software
was maintained then for a while by the Debian project.
But even Debian will now pull the plug and rssh won't be available in their
next stable release. Considering these facts it makes sense to let this port
expire towards the end of Q2.
PR: 235121
Approved by: miwi (mentor), maintainer
Differential Revision: https://reviews.freebsd.org/D19503
shells/rssh: Apply fixes for basename(3) handling and some security issues
basename(3) has been changed to be POSIX compliant in r308264. This implies
that it can possibly write to the passed string. shells/rssh passes a const
string, so it always crashes on invocation with FreeBSD 12 and later. The
new patches remedy this issue. [1] [2]
During further tests and research came to light that there were also
recently discovered security issues with the parsing of rsync/scp command
line arguments and insufficient sanitization of environment variables when
using rysnc.
The corresponding fixes have been incorporated to the new patches and the
already existing patch for the RSYNC option has been tightened for the
argument parsing. Please note that with this patch the scp option "-3" can
(Only the first 15 lines of the commit message are shown above )
Add an @shell keyword to handle adding and remove a shell path in /etc/shell
Bump port revision of all ports that were doing it wrong prior to the keyword
CR: D208
Reviewed by: antoine
With hat: portmgr
shells/rssh: mark FORBIDDEN due to being vulnerable
http://www.vuxml.org/freebsd/65b25acc-e63b-11e1-b81c-001b77d09812.html
documents rather serious vulnerability that allows people to curcumvent
protections put by rssh, thus making it a kind of non-usable tool.
Security: 65b25acc-e63b-11e1-b81c-001b77d09812
There is a string format vulnerability in rssh-2.2.1
http://www.pizzashack.org/rssh/security.shtml
- update to 2.2.2
- use REINPLACE_CMD instead of the patch file
- correct the knob for RDIST
PR: 73143
Submitted by: leeym
- rssh < 2.2.1 has information disclosure vulnerability, so update to 2.2.1
- rssh depends on rsync and rdist (optionally)
PR: 71472
Submitted by: leeym
Approved by: portmgr (marcus)
Add rssh 2.1.1, a Restricted Secure SHell only for sftp or/and scp.
rssh is a Restricted Secure SHell that allow only the use of sftp or
scp. It could be use when you need an account (and a valid shell) in
order to execute sftp or scp but when you don't want to give the
possibility to log in to this user.
WWW: http://www.pizzashack.org/rssh/index.shtml
PR: ports/65860
Submitted by: enigmatyc
