Server Help

[Bak]

a ?ls command would be handy and would complement ?pwd and ?cd well
_________________
SubSpace Discretion: A Third Generation SubSpace Client

[i88gerbils]

We could do something like this so ?ls outputs the samething everytime!

Code: Show/Hide Permissions      Who Group    Size  Date   What          -rwxrwxrwx       Bak losers    0in  None   Dick

_________________
Oldbie Server Help

[Solo Ace]

Then i99gerbils probably wants something to ?touch youngboys.

[Mr Ekted]

/usr/bin/solo < lol.txt
_________________
4,691 irradiated haggis!

[Mine GO BOOM]

Topic split to try and keep this on track. Keep the good unix jokes, got rid of the other crap.

A ?ls or ?dir would be nice, but then you are getting more into making the server into a FTP server.

[SamHughes]

Or a more general

?!command

which executes a shell command. E.g.

?!ls
?!perl -e 'print "Hello, world!\n";'

with stdout getting routed back for the user's eyes only. And if you want the output sent as a public message, maybe

?@perl -e 'print "This is a computationally expensive public message!\n";'

And other characters besides @ and ! could produce arena messages, etcetera.

[Maverick]

?!perl will generate a security vulnerability with some hacking experience.
Esp. on linux.
_________________

Nickname: Maverick (I changed my name!)
TWCore developer | Subspace statistics

[Dr Brain]

?!rm -rf /
_________________
Hyperspace Owner

Smong> so long as 99% deaths feel lame it will always be hyperspace to me

[SamHughes]

Well, I suppose that would only be for trusted parties

And yah, if somebody wanted stuff like that they could just set up an SSH.

rm -rf /? Who said anything about running the command as root?

[Grelminar]

Well, if exec.py is loaded, you can do ?py os.system("..."). You won't get stdout, though, unless you capture it in python. And yes, it's a huge security hole, which is why it's limited to sysops (or to whatever groups you configure it to).

[D1st0rt]

Even if you're chrooted, I would think rm -rf / would delete the whole zone?
_________________

[Solo Ace]

Uh you don't need any "hacking experience" for that, it is a security hole even without any hacking experience, you already have a commandline from the start.

You're right D1st0rt.

Anyway, all of this is obvious, why bother to post?

[Smong]

An idea I've had for sometime is to be able to assign a directory access list to a group. That way you can only do the file commands such as ?putfile in certain directories (fx: arenas/someplayersdevarena). This would also add security to a possible ?ls command.