[asterisk-users] Executing shell commands via AMI

[Danny Nicholas]

  _____  

From: asterisk-users-bounces at lists.digium.com
[mailto:asterisk-users-bounces at lists.digium.com] On Behalf Of Vinícius
Fontes
Sent: Wednesday, March 16, 2011 5:02 PM
To: Asterisk Users Mailing List - Non-Commercial Discussion
Subject: Re: [asterisk-users] Executing shell commands via AMI

 

But what about if asterisk running with non-privilege user?

Still it is not a good idea.

Yes I forgot to say that I also run Asterisk as a regular user, which also
helps with security.

 

But I really don't see much of a threat on this. AGI does almost the same.

 

This won’t help but I’ll chip in anyway.  In AGI, you have “total” local
control.  In AMI, it’s a crap shoot.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.digium.com/pipermail/asterisk-users/attachments/20110316/0308d093/attachment.htm>