1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
|
TODO List
===========
Below are things that I can envision implementing or improving.
The presence of something on this list does not mean that
it will be implemented.
Contributors are encouraged to reach out in advance
to kibbiz about implementation.
* security improvements
* refuse to run if any files are world writable
* logging improvements
* Use standard python logging
* add timestamps
* change output of success
* syslog support
* add `--debug` to write traceback and more verbose errors
* key installation improvements
* allow arbitrary `authorized_keys` ssh options, for
example `no-pty`, `permitopen`, etc.
* `--force` to overwrite key entries in `authorized_keys` when
installing keys
* command line option for authprogs path
* identify installation attempt of private keys
* add 'restrict' to the pubkey entry if supported by the version of sshd
* config rules improvements
* chdir to a directory before running
* set environment variables
* set `$PATH`
* restrictions additions
* support for hostnames
* time of day/week/etc
* chroot to a different user via sudo before running
* Would require your user has unrestricted sudo for this command
* command matching improvements
* case-insensitive pcre
* whitespace support (clunky/worrisome)
* shell regex command matching
* forced command specification
* allow you to match a command and then run something completely different
* ability to function as a login shell
* would lose `--name` functionality
* rsync support
* investigate --include / --exclude / --files-from
* verify globbing support and security
* support uploading to file that does not exist
yet when using `files`. Currently it does a
realpath check which fails since the file
doesn't exist.
* add option that allows access to any
files under a given directory, rather than
being explicit
* create a cache for rsync\_realpaths to decrease
lookups when files are listed in multiple rules
* allow/disallow symlinks (-l)
* support setting allowed rsync binary paths
* replace rsync path with discovered path prior to
running command - will help avoid a timing attack
if an rsync binary is found in $PATH between check
and exec.
* scp support
* support for `-d` (targetshouldbedirectory)
* mock out shutils.which in unit tests to remove
dependency on locally-installed scp binary
|
