Project

General

Profile

Feature #9260

ssh_tunnel_shell: Disable console message output

Added by Jim Pingle over 2 years ago. Updated 26 days ago.

Status:
Resolved
Priority:
Normal
Assignee:
Category:
User Manager / Privileges
Target version:
Start date:
01/07/2019
Due date:
% Done:

100%

Estimated time:
Release Notes:
Default

Description

Users with only the "User - System: SSH Tunneling" privilege get the ssh_tunnel_shell program as their shell. When connected, these users receive console wall(1) type messages such as login notices, which are not relevant to ssh tunneling.

If possible, these messages should be muted rather than displayed to the user.

History

#1 Updated by Jim Thompson over 2 years ago

It’s worse than that. If I’m looking at the right source, that binary does nothing but chatter at the poor user.

Also, nbytes is unititislized on the stack, and tested > 0 on first use. Sheer chance that it works.

This POS needs a rewrite.

#2 Updated by Jim Pingle about 2 years ago

  • Target version changed from 48 to 2.5.0

#3 Updated by Steve Beaver 6 months ago

  • Assignee set to Jim Pingle

#4 Updated by Steve Beaver 6 months ago

  • Assignee changed from Jim Pingle to Luiz Souza

#5 Updated by Luiz Souza 6 months ago

  • Status changed from New to Feedback
  • % Done changed from 0 to 100

Silenced all the output of ssh_tunnel_shell.

Looks way better now, let me know if I have missed something.

#6 Updated by Alhusein Zawi 6 months ago

Steps:

  • created a user.
  • Assigned "User - System: SSH tunneling" as Privilege.
  • Used putty to SSH.
  • logged in by using the created user.

I did not see any notice or unexpected message.

#7 Updated by Alhusein Zawi 3 months ago

  • Status changed from Feedback to Resolved

#8 Updated by Carlos Man 26 days ago

I just upgraded to 2.5.0. I had regular users configured with the "User - System: SSH tunneling" permission, accessing a SQL server via SSH tunnel through the firewall. With this new version of pfSense, those same users can ONLY use the same SSH tunnel if they are configured as administrators. Otherwise, the tunnel does not work.

Also available in: Atom PDF