[asterisk-users] Disable root shell from CLI

Rob Hillis rob at hillis.dyndns.org
Mon Feb 12 05:04:59 MST 2007


Try changing the shell for the asterisk user to /bin/false.  This should 
disallow anything passed through the ! command since it runs the command 
via the shell for the asterisk user.


jeremij jerome wrote:
> Hi,
>  
> I configured Asterisk to run as "asterisk" user, but I see that a user 
> can anyway get a root sheet using !command in CLI. I understood that 
> it's something related to safe_asterisk and TTY console, but modifying 
> the script safe_asterisk I wasn't able to disable this root access.
>  
> Can someone help me?
>  
> Thanks.



More information about the asterisk-users mailing list