michael/webmin
1
0
Fork 0
mirror of https://github.com/webmin/webmin.git synced 2026-02-03 14:13:29 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Fix to allow disabling the enforcement of sudo-capable logins

Browse Source
This commit is contained in:
Ilia Ross
2024-06-12 20:14:06 +03:00
parent 35aee74311
commit 5dc7cfafd7
4 changed files with 13 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
xterm/acl_security.pl
View File

@@ -10,6 +10,14 @@ my ($o) = @_;
print &ui_table_row($text{'acl_user'}, print &ui_table_row($text{'acl_user'},
&ui_opt_textbox("user", $o->{'user'} eq '*' ? undef : $o->{'user'}, &ui_opt_textbox("user", $o->{'user'} eq '*' ? undef : $o->{'user'},
20, $text{'acl_sameuser'})); 20, $text{'acl_sameuser'}));
if ($o->{'user'} eq "root" && $remote_user ne $o->{'user'}) {
print &ui_table_row($text{'acl_sudoenforce'},
&ui_yesno_radio("sudoenforce", $o->{'sudoenforce'} == 1 ? 1 : 0));
}
else {
print &ui_hidden("sudoenforce", $o->{'sudoenforce'});
}
} }
sub acl_security_save sub acl_security_save
@@ -17,4 +25,5 @@ sub acl_security_save
my ($o) = @_; my ($o) = @_;
$o->{'user'} = $in{'user_def'} ? '*' : $in{'user'}; $o->{'user'} = $in{'user_def'} ? '*' : $in{'user'};
$o->{'sudoenforce'} = $in{'sudoenforce'} ? 1 : 0;
} }

1
xterm/defaultacl
View File

@@ -1 +1,2 @@
user=root user=root
sudoenforce=1

3
xterm/index.cgi
View File

@@ -175,7 +175,8 @@ my $user = $access{'user'};
if ($user eq "*") { if ($user eq "*") {
$user = $remote_user; $user = $remote_user;
} }
elsif ($user eq "root" && $remote_user ne $user && !$in{'user'}) { elsif ($user eq "root" && $remote_user ne $user && !$in{'user'} &&
$access{'sudoenforce'} ne '0') {
# If possible, start with a sudo-capable user # If possible, start with a sudo-capable user
my @uinfo = getpwnam($remote_user); my @uinfo = getpwnam($remote_user);
if (@uinfo && $uinfo[7]) { if (@uinfo && $uinfo[7]) {

1
xterm/lang/en
View File

@@ -9,3 +9,4 @@ index_eproxy=The Terminal module cannot be used when accessing Webmin via anothe
acl_user=Run shell as Unix user acl_user=Run shell as Unix user
acl_sameuser=Same as Webmin login acl_sameuser=Same as Webmin login
acl_sudoenforce=Enforce <em>sudo</em>-only privileges