Page 1 of 1
Disabling SSH Module
Posted: Thu Feb 07, 2019 11:38 am
by bomahony
Is there a way to disable the SSH module from the Admin page [actually just realised any user can get this page without logging in!]?
I am trying to request access to the web interface from inside a restricted environment but this, while probably a great tool most of the time, would be a show stopper as it would allow a malicious actor a vector for access the machine.
Re: Disabling SSH Module
Posted: Thu Feb 07, 2019 1:03 pm
by benjaminsmith
Hello
@bomahony,
The SSH terminal feature uses shellinbox and you can disable this on your server if you'd like.
Please see this post:
https://support.nagios.com/forum/viewto ... hellinabox
Let me know if you have any questions.
Re: Disabling SSH Module
Posted: Thu Feb 07, 2019 1:11 pm
by bomahony
Hit with the "really should have searched" bat
Thanks for that mate, Ill get to it during my change window tomorrow.
A nice feature would be to enable this for specific users though
Re: Disabling SSH Module
Posted: Thu Feb 07, 2019 1:36 pm
by benjaminsmith
A nice feature would be to enable this for specific users though
We''re adding the ability to turn this off, I don't have an ETA right now, but it's in the queue.
Appreciate the input. Let me know if you need any other assistance or if it's ok to close this thread.
Cheers,
Ben
Re: Disabling SSH Module
Posted: Fri Feb 08, 2019 5:30 am
by bomahony
Close it out.
Regards
B
Re: Disabling SSH Module
Posted: Fri Feb 08, 2019 8:23 am
by scottwilkerson
bomahony wrote:Close it out.
Regards
B
Locking thread