Feature #9260


ssh_tunnel_shell: Disable console message output

Added by Jim Pingle over 4 years ago. Updated about 2 years ago.

User Manager / Privileges
Target version:
Start date:
Due date:
% Done:


Estimated time:
Plus Target Version:
Release Notes:


Users with only the "User - System: SSH Tunneling" privilege get the ssh_tunnel_shell program as their shell. When connected, these users receive console wall(1) type messages such as login notices, which are not relevant to ssh tunneling.

If possible, these messages should be muted rather than displayed to the user.

Actions #1

Updated by Jim Thompson over 4 years ago

It’s worse than that. If I’m looking at the right source, that binary does nothing but chatter at the poor user.

Also, nbytes is unititislized on the stack, and tested > 0 on first use. Sheer chance that it works.

This POS needs a rewrite.

Actions #2

Updated by Jim Pingle about 4 years ago

  • Target version changed from 48 to 2.5.0
Actions #3

Updated by Anonymous over 2 years ago

  • Assignee set to Jim Pingle
Actions #4

Updated by Anonymous over 2 years ago

  • Assignee changed from Jim Pingle to Luiz Souza
Actions #5

Updated by Luiz Souza over 2 years ago

  • Status changed from New to Feedback
  • % Done changed from 0 to 100

Silenced all the output of ssh_tunnel_shell.

Looks way better now, let me know if I have missed something.

Actions #6

Updated by Alhusein Zawi over 2 years ago


  • created a user.
  • Assigned "User - System: SSH tunneling" as Privilege.
  • Used putty to SSH.
  • logged in by using the created user.

I did not see any notice or unexpected message.

Actions #7

Updated by Alhusein Zawi over 2 years ago

  • Status changed from Feedback to Resolved
Actions #8

Updated by Carlos Man about 2 years ago

I just upgraded to 2.5.0. I had regular users configured with the "User - System: SSH tunneling" permission, accessing a SQL server via SSH tunnel through the firewall. With this new version of pfSense, those same users can ONLY use the same SSH tunnel if they are configured as administrators. Otherwise, the tunnel does not work.


Also available in: Atom PDF