Fixed: FS#914 - User can login without being jailed

tbrehm · tbrehm · commit 945397f40938 · 2009-10-01T14:23:55.000Z
diff --git a/server/plugins-available/shelluser_base_plugin.inc.php b/server/plugins-available/shelluser_base_plugin.inc.php
@@ -96,7 +96,7 @@ function insert($event_name,$data) {
 				
 				//* Disable shell user temporarily if we use jailkit
 				if($data['new']['chroot'] == 'jailkit') {
-					$command = 'usermod -L '.escapeshellcmd($data['new']['username']);
+					$command = 'usermod -s /bin/false -L '.escapeshellcmd($data['new']['username']);
 					exec($command);
 					$app->log("Disabling shelluser temporarily: ".$command,LOGLEVEL_DEBUG);
 				}

Original file line number	Diff line number	Diff line change
`@@ -96,7 +96,7 @@ function insert($event_name,$data) {`
`96`	`96`
`97`	`97`	`//* Disable shell user temporarily if we use jailkit`
`98`	`98`	`if($data['new']['chroot'] == 'jailkit') {`
`99`		`- $command = 'usermod -L '.escapeshellcmd($data['new']['username']);`
	`99`	`+ $command = 'usermod -s /bin/false -L '.escapeshellcmd($data['new']['username']);`
`100`	`100`	`exec($command);`
`101`	`101`	`$app->log("Disabling shelluser temporarily: ".$command,LOGLEVEL_DEBUG);`
`102`	`102`	`}`