If you want to contribute to this project, please do not hesitate. You can:
– report a bug, please refer to the bug tracker here.
– discuss/ask something about lshell(1), please open a discussion inside the forum here.
– send me an email: ghantoos {at} ghantoos [dot] org

Kind regards,
Ignace M -ghantoos-

lshell cannot restrict sftp(1) to a certain folder.
When “sftp” is enable for a user/group, you allow lshell(1) to invoke sftp(1) if it requested by the user.

lshell(1) can only try to prevent shell escapes from being executed from the sftp instance.

Regards,
Ignace M -ghantoos-

I will work on correcting this ASAP.

You can keep track of the bug resolution here.

Regards,
Ignace M -ghantoos-

You are in a limited shell.
Type ‘?’ or ‘help’ to get the list of allowed commands
maciek:~$ cat /proc/version
*** forbidden synthax -> “cat /proc/version”
*** You have 1 joker(s) left, before getting kicked out.
This incident has been reported.
maciek:~$ tail -n 1 /proc/version
*** forbidden synthax -> “tail -n 1 /proc/version”
*** You have 0 joker(s) left, before getting kicked out.
This incident has been reported.
maciek:~$ ls /proc/irq
*** forbidden synthax -> “ls /proc/irq”
- Kicked out -

but this is bad solution..

You are in a limited shell.
Type ‘?’ or ‘help’ to get the list of allowed commands
maciek:~$ ls /proc
*** forbidden path -> “/proc”
*** You have 1 joker(s) left, before getting kicked out.
This incident has been reported.
maciek:~$ cd /proc
*** forbidden path -> “/proc”
*** You have 0 joker(s) left, before getting kicked out.
This incident has been reported.
maciek:~$ cat /proc/version
Linux version 2.6.30-ARCH (root@T-POWA-LX) (gcc version 4.4.1 (GCC) ) #1 SMP PREEMPT Fri Jul 31 18:10:38 UTC 2009
maciek:~$ tail -n 1 /proc/version
Linux version 2.6.30-ARCH (root@T-POWA-LX) (gcc version 4.4.1 (GCC) ) #1 SMP PREEMPT Fri Jul 31 18:10:38 UTC 2009

@all
If you have any suggestion about lshell, please do not hesitate to start a thread on the forums

Cheers,
Ignace M -ghantoos-

A new version of lshell is now available: lshell-0.9.3

It corrects the bug reported by wei wufeng that appeard with the new ‘aliases’ feature of lshell-0.9.2. See the changelog.

It seems I did curse myself, with my last “this is the stable version”, so I won’t say it this time ;)

Cheers,
Ignace M -ghantoos-

def get_aliases(self,line):
“”" Replace all configured aliases in the line
“”"
(…)

# for item in self.conf['aliases'].keys():
# line = re.sub(‘(^|;|&|\|)%s’ %item,self.conf['aliases'][item],line)

(…)

return line

If I had found your project when searching for a limited shell, I may not have coded lshell. :)

As you said, some features overlap.

Reading the documentation of jk_lsh, it seems lshell(1) is more complete as a system shell and offers many other features.
This seems quite normal as jk_lsh is intended to be used as part of the jailkit project whereas lshell(1) is to be used without any jail setup.

Nevertheless, I think I will be trying jailkit soon.

Cheers,
Ignace M -ghantoos-

It adds 2 new features. See the changelog.

Unless something big comes up, this should be a stable version of lshell. (I hope I’m not cursing myself with this statement..;) )

Cheers,
Ignace M -ghantoos-

It corrects many bugs, and adds new features. See the changelog.

Cheers,
Ignace M -ghantoos-