debian/0000755000000000000000000000000012214423622007164 5ustar debian/source/0000755000000000000000000000000012214414674010473 5ustar debian/source/format0000644000000000000000000000001412214414674011701 0ustar 3.0 (quilt) debian/compat0000644000000000000000000000000212214414674010371 0ustar 9 debian/lshell.docs0000644000000000000000000000000712214414674011325 0ustar README debian/lshell.dirs0000644000000000000000000000002012214414674011331 0ustar var/log/lshell/ debian/changelog0000644000000000000000000000651712214414674011056 0ustar lshell (0.9.16-1) unstable; urgency=low * New upstream release (Closes: #668776). * debian/control: - Bumped Standards-Version to 3.9.4. - Remove obsolete DM-Upload-Allowed field. * debian/rules: - Added override for dh_auto_install. -- Ignace Mouzannar Thu, 15 Aug 2013 18:09:39 +0400 lshell (0.9.15.1-1) unstable; urgency=low * New upstream release. * debian/control: - Bumped Standards-Version to 3.9.3. - Updated debhelper version dependency to (>= 9). - Removed dependency on python-support. - Updated python version dependency to (>= 2.6.6-3~). - Added X-Python-Version field. - Added DM-Upload-Allowed. - Added Homepage field. * debian/rules: - Added python2 to dh's --with argument. * debian/copyright: - Updated to follow dep5. * debian/compat: - Set to 9. * Deleted debian/pyversions and debian/pycompat. -- Ignace Mouzannar Tue, 10 Apr 2012 04:28:05 +0400 lshell (0.9.14-1) unstable; urgency=low * New upstream release: - Corrects multiple minor bugs. - Add new features as lsudo, history and logging via syslog. * debian/control: - Bumped Standards-Version to 3.9.1. -- Ignace Mouzannar Sun, 27 Feb 2011 19:49:11 +0100 lshell (0.9.12-1) unstable; urgency=low * New upstream release: - Corrects a major security bug (overriding path restrictions using variable expansion). - Adds the ability to allow/forbid upload and/or downloads via SCP. -- Ignace Mouzannar Wed, 05 May 2010 23:12:05 +0200 lshell (0.9.10-1) unstable; urgency=low * New upstream release: - Corrects major security bugs. (Closes: #572144) - Adds a logrotate file. - Adds new features. * debian/control: - Bumped Standards-Version to 3.8.4. -- Ignace Mouzannar Sun, 07 Mar 2010 01:52:57 +0000 lshell (0.9.8-1) unstable; urgency=low * New upstream version: - Corrects crash when directory permission denied. - Adds minor features. * Updated packaging format to "3.0 (quilt)". * debian/rules: - Updated to use dh7 features. (Closes: #557826) * debian/control: - Bumped debhelper dependency to (>= 7.0.50~) for dh7 features support. - Moved Build-Depends-Indep dependencies to Build-Depends. - Replaced python-all-dev dependency by python. -- Ignace Mouzannar Tue, 01 Dec 2009 19:07:01 +0100 lshell (0.9.6-1) unstable; urgency=low * Major security fix. User had access to all files located in forbidden directories. * lshell exits gracefully when user home directory doesn't exist. * Added makejail(8) configuration example to help create a chroot with all the required files to run lshell. * Updated the debian/watch file. * Standards-Version bumped to 3.8.3. -- Ignace Mouzannar Wed, 09 Sep 2009 20:17:45 +0200 lshell (0.9.5-2) unstable; urgency=low * Added a dependency on adduser as addgroup(8) is used is the post installation. * Corrected the debian/rules file to install only one copy of upstream's changelog. -- Ignace Mouzannar Wed, 19 Aug 2009 22:43:22 +0200 lshell (0.9.5-1) unstable; urgency=low * Initial release. (Closes: #503437) -- Ignace Mouzannar Tue, 28 Jul 2009 19:50:43 +0200 debian/rules0000755000000000000000000000046012214414674010253 0ustar #!/usr/bin/make -f # -*- makefile -*- export DH_ALWAYS_EXCLUDE=COPYING:CHANGES export PYTHON=`which python` %: dh $@ --with python2 override_dh_auto_install: $(PYTHON) setup.py install --root=$(CURDIR)/debian/lshell --install-layout=deb override_dh_installchangelogs: dh_installchangelogs CHANGES debian/control0000644000000000000000000000135612214414674010603 0ustar Source: lshell Section: shells Priority: optional Maintainer: Ignace Mouzannar Build-Depends: debhelper (>= 9), python (>= 2.6.6-3~) X-Python-Version: >=2.5, <=2.7 Standards-Version: 3.9.4 Homepage: https://github.com/ghantoos/lshell Package: lshell Architecture: all Homepage: http://lshell.ghantoos.org/ Depends: ${misc:Depends}, ${python:Depends}, adduser XB-Python-Version: ${python:Versions} Description: restricts a user's shell environment to limited sets of commands lshell is a shell coded in Python that lets you restrict a user's environment to limited sets of commands, choose to enable/disable any command over SSH (e.g. SCP, SFTP, rsync, etc.), log user's commands, implement timing restrictions, and more. debian/lshell.postrm0000644000000000000000000000116012214414674011722 0ustar #!/bin/sh # postrm script for lshell # # see: dh_installdeb(1) # # $Id: lshell.postrm,v 1.4 2009/07/28 18:14:54 ghantoos Exp $ set -e case "$1" in remove|purge|disappear) if [ -x /usr/sbin/remove-shell ] && [ -f /etc/shells ]; then remove-shell /usr/bin/lshell fi ;; upgrade|failed-upgrade|abort-upgrade|abort-install) # do nothing ;; *) echo "postrm called with unknown argument \`$1'" >&2 exit 1 ;; esac # dh_installdeb will replace this with shell code automatically # generated by other debhelper scripts. #DEBHELPER# exit 0 debian/pyversions0000644000000000000000000000000512214414674011332 0ustar 2.4- debian/lshell.postinst0000644000000000000000000000117512214414674012267 0ustar #!/bin/sh # postinst script for lshell # # $Id: lshell.postinst,v 1.5 2009/07/28 18:46:43 ghantoos Exp $ # #DEBHELPER# set -e case "$1" in configure) # add lshell group, and make it own the default log file if ! getent group lshell 2>&1 > /dev/null; then addgroup --system lshell fi chown root:lshell /var/log/lshell/ chmod -R 770 /var/log/lshell/ if [ -x /usr/sbin/add-shell ]; then add-shell /usr/bin/lshell fi ;; abort-upgrade|abort-remove|abort-deconfigure) ;; *) echo "postinst called with unknown argument \`$1'" >&2 exit 1 ;; esac exit 0 debian/lshell.examples0000644000000000000000000000003412214414674012213 0ustar debian/lshell-makejail.conf debian/pycompat0000644000000000000000000000000212214414674010742 0ustar 2 debian/lshell-makejail.conf0000644000000000000000000000271712214414674013107 0ustar # Makejail configuration file for lshell(1) # # $Id: lshell-makejail.conf,v 1.1 2009/09/11 15:01:12 ghantoos Exp $ # Path to the chroot environment chroot = '/var/chroot/lshell' # Path to lshell binary and list of allowed all the allowed commands testCommandsInsideJail = ['/usr/bin/lshell'] # Process name / names, its a python list processNames = ['lshell'] # Replace/add the usernames you want to grant access to the chroot users = ['foo'] groups = ['lshell', 'bar'] # Force copy of python PATH files, and lshell's default logging directory # You must change this directory, if you modify the 'logpath' variable in # lshell's configuration file forceCopy = ['/usr/lib/python2.5/site-packages/*.pth', '/var/log/lshell/'] # Changes to do to jail lshell: # # 1- Create the chroot directory (e.g. mkdir /var/chroot/lshell) # # 2- Add the allowed commands list to the 'testCommandsInsideJail' # variable above e.g: ['/usr/bin/lshell', 'ls', 'echo', 'cat'] # # 3- Add the list of users/groups that are allowed inside the chroot. # NOTE: you have to add _all_ the groups your users belong to. # Another, less secure, option is putting ['*'] in the 'groups' field. # # 4- If needed, change the log directory in the 'forceCopy' variable above # # 5- Run the following as root: # $ /usr/sbin/makejail /path/to/lshell-makejail.conf # in order to copy all the necessary files inside the chroot. # # 6- Create the home directories of your users. # # This should be it. debian/copyright0000644000000000000000000000205112214414674011124 0ustar Format: http://www.debian.org/doc/packaging-manuals/copyright-format/1.0/ Upstream-Name: lshell Upstream-Contact: Ignace Mouzannar Source: https://sourceforge.net/projects/lshell/files/latest/download Files: * Copyright: 2009-2012, Ignace Mouzannar License: GPL-3 This package is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. . This package is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. . You should have received a copy of the GNU General Public License along with this package; if not, see . . On Debian systems, the complete text of the GNU General Public License can be found in `/usr/share/common-licenses/GPL-3'. debian/watch0000644000000000000000000000006412214414674010224 0ustar version=3 http://sf.net/lshell/lshell-(.*)\.tar\.gz