ForumsHQ

Aragon, by doing that, is there any way to kill your telnet connection and get dropped back to the linux prompt? If there is, you might wanna make sure this users account is very well secure. Having someone with a lot of experience running around in your linux shell is a horrible security problem. I don't see how it could be done, since your shell is telnet, but there might be a way that I don't see.

It seems pretty secure, as soon as connection is lost through telnet to the bbs it automatically disconnects from the linux box.

right, but then all they gotta do is reconnect to the linux box and wala..

Well, they'll reconnect to the linux box and put in their username and get transferred to the bbs. I was just wondering if there was a way to drop your "telnet" connection and go back to a regular shell.

This is a pretty old thread, but what the heck :)



Yes, it is possible to drop out of telnet and get a shell. All you need to do is hit CTRL-] (for the telnet menu) and then hit ! to invoke the shell. To prevent someone from doing this, you need to call telnet with the -E parameter, this will block access to the menu.

If the users default shell is 'telnet bbsaddress', ! should just re-invoke the users default shell, no?

Nope, ! is used to execute single commands in a subshell via /bin/sh. If the command is omitted, telnet opens an interactive shell (also using /bin/sh).

sudo it :-p