rcsh
Non-interactive command whitelisted shell
This is a work-in-progress little script intended to be used as a shell for Linux user accounts which are allowed to run a limited set of commands over SSH non-interactively and nothing else. The commands which are allowed are based on a whitelist of exact command invocation strings and/or a list of regular expressions which they should match.
Free software: BSD license
Documentation: https://rcsh.readthedocs.io. (not much documentation yet, please stand by…)
Features
Allow execution of commands based on an exact or regular expression whitelist
Log invocation using syslog’s LOG_AUTH facilities
Credits
This package was inspired by lshell and bdsh:
This package was created with Cookiecutter and the audreyr/cookiecutter-pypackage project template.
History
0.1.0 (2017-03-01)
First release on PyPI.
0.2.0 (2017-03-18)
An actually functional release on PyPI.
Some unittesting
Some documentation
0.2.1 (2017-03-20)
Fixed typo in configuration option
0.2.2 (2017-03-20)
Removed redundant print statement
0.2.3 (2017-03-20)
Fixed some python2 timeout logic bug
1 maintainer
Metadata
1 maintainer
Release files for rcsh 0.2.3
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| rcsh-0.2.3.tar.gz | 14.8 kB | Without provenance | Details for rcsh-0.2.3.tar.gz |
Release files / rcsh-0.2.3.tar.gz
| Download URL | rcsh-0.2.3.tar.gz |
|---|---|
| Size | 14.8 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
4f4928cf162fa5c55d8391a30863915d720ae15ea197823a095581435991631f
|
|
BLAKE2b-256 checksum How to use checksums |
55aaf5ea3c3e38ba8e9ff61df6275aae1ef64eb1a458a4868e576981d28e2338
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
Security for rcsh 0.2.3
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.
