From 99cb22d717aefea1b76ebfab33cada925c1d5e31 Mon Sep 17 00:00:00 2001 From: tbrehm <t.brehm@ispconfig.org> Date: Mon, 02 Mar 2009 10:46:14 -0500 Subject: [PATCH] - Changed default root for websites from /var/clients to /var/www/clients. - Added deny directives to prevent direct access to the /var/www/clients and /var/www/domain.tld directories. --- server/plugins-available/shelluser_base_plugin.inc.php | 7 +++++++ 1 files changed, 7 insertions(+), 0 deletions(-) diff --git a/server/plugins-available/shelluser_base_plugin.inc.php b/server/plugins-available/shelluser_base_plugin.inc.php index 59cfad9..85a6156 100755 --- a/server/plugins-available/shelluser_base_plugin.inc.php +++ b/server/plugins-available/shelluser_base_plugin.inc.php @@ -87,6 +87,13 @@ exec($command); $app->log("Added shelluser: ".$data['new']['username'],LOGLEVEL_DEBUG); + + //* Disable shell user temporarily if we use jailkit + if($data['new']['chroot'] == 'jailkit') { + $command = 'usermod --lock '.escapeshellcmd($data['new']['username']); + exec($command); + $app->log("Disabling shelluser temporarily: ".$data['new']['username'],LOGLEVEL_DEBUG); + } } else { $app->log("UID = $uid for shelluser:".$data['new']['username']." not allowed.",LOGLEVEL_ERROR); -- Gitblit v1.9.1