BuycPanel Blog

BuycPanel Blog

Latest news and updates

What is the ‘Manage Shell’ Interface?

Posted by Allura on 13 12 2018.

Introduction
This interface allows one to manage accounts which can access one’s server remotely from the command line.

As a warning it must be noted that many users want this type of access, but before granting complete shell access to users, one should always consider the security risks. We recommend to provide jailed shell (sometimes seen as jailshell) access to users, to prevent the execution of certain harmful commands.

Manage Shell Access
Steps:

 	One can click on appropriate button at the top of the interface.
 	Select the desired type of access in the row corresponding to that account.

The account’s package determines  the account’s shell access. If the account’s permission is changed to access a shell, the system will set the value for the account’s package to undefine in the account’s userdata file.

One can select the following types of shell access:

 	Normal Shell — This option grants the user access to the shell with no…

Introduction

This interface allows one to manage accounts which can access one’s server remotely from the command line.

As a warning it must be noted that many users want this type of access, but before granting complete shell access to users, one should always consider the security risks. We recommend to provide jailed shell (sometimes seen as jailshell) access to users, to prevent the execution of certain harmful commands.

Manage Shell Access

Steps:

  • One can click on appropriate button at the top of the interface.
  • Select the desired type of access in the row corresponding to that account.

The account’s package determines  the account’s shell access. If the account’s permission is changed to access a shell, the system will set the value for the account’s package to undefine in the account’s userdata file.

One can select the following types of shell access:

  • Normal Shell — This option grants the user access to the shell with no limitations.
  • Jailed Shell — This option grants the user access to a jailed shell limiting the user’s ability to run certain commands that can harm one’s server. One can read the VirtFS – Jailed Shell documentation for further information.
  • Disabled Shell — This option denies shell access to the user.

It is to note that an account with a disabled shell may use SFTP if a user enables it. To disable it, one must  set /bin/false as the user’s shell. Run the following command as the root user where username is the account for which the user wish to disable SFTP:

usermod -s /bin/false username

Conclusion

This feature helps a user in certain ways as reviewed in the article.