[arm-allstar] lsnodes update

Doug Crompton wa3dsp at gmail.com
Sun Apr 28 18:31:22 EDT 2019


Gervais,

 Just type exactly -

> /srv/http/lsnodes/lsnodes_no_supermon_pw

at the Linux prompt. That will create the file.


*73 Doug*

*WA3DSP*

*http://www.crompton.com/hamradio <http://www.crompton.com/hamradio>*


On Sun, Apr 28, 2019 at 6:29 PM "Gervais Fillion via ARM-allstar" <
arm-allstar at hamvoip.org> wrote:

> Doug
>
> is there an HOW to of how too ?
>
> "UNLESS you create the zero length
> file called lsnodes_no_supermon_pw in the /srv/http/lsnodes/  "
>
> thanks
> gervais
>
>
>
>
> ________________________________
> De : ARM-allstar <arm-allstar-bounces at hamvoip.org> de la part de "Doug
> Crompton via ARM-allstar" <arm-allstar at hamvoip.org>
> Envoyé : 28 avril 2019 17:00
> À : ARM Allstar
> Cc : Doug Crompton
> Objet : [arm-allstar] lsnodes update
>
> An update went out today for lsnodes that corrected some errors and added
> some functionality. Note that security has been added to lsnodes which
> requires oyu to be logged into supermon UNLESS you create the zero length
> file called lsnodes_no_supermon_pw in the /srv/http/lsnodes/  If you do
> this understand that lsnodes is vulnerable to allowing outside users to
> execute commands if you have your http port forwarded. By default it is
> more secure and should be left this way if you use supermon or lsnodes
> publicly.
>
> The following changes were made -
>
> /srv/http/cgi-bin/lsnodes_web
>
>        Corrected long standing error - now nodes marked with a  '*' are
> directly connected
>        Formerly it did not match all nodes.
>        Added hostname for registration display  - nice to be able to see
> which is which.
>
> /srv/http/lsnodes/lsnodes_form.php
>
>       Added check that you are logged into Supermon to allow use of lsnodes
> commands.
>       Will be documented in supermon howto.
>
>       Add  /srv/http/lsnodes/lsnodes_no_supermon_pw    Zero length file to
> turn off security.
>       This will lockout any lsnodes user from commands when not using
> supermon unless they add this file.
>
>
> *73 Doug*
>
> *WA3DSP*
>
> *http://www.crompton.com/hamradio <http://www.crompton.com/hamradio>*
> _______________________________________________
>
> ARM-allstar mailing list
> ARM-allstar at hamvoip.org
> http://lists.hamvoip.org/cgi-bin/mailman/listinfo/arm-allstar
>
> Visit the BBB and RPi2/3 web page - http://hamvoip.org
> _______________________________________________
>
> ARM-allstar mailing list
> ARM-allstar at hamvoip.org
> http://lists.hamvoip.org/cgi-bin/mailman/listinfo/arm-allstar
>
> Visit the BBB and RPi2/3 web page - http://hamvoip.org
>


More information about the ARM-allstar mailing list