Synchronet v3.20b-Win32 (install) has been released (Jan-2025).

You can donate to the Synchronet project using PayPal.

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
howto:linuxapps [2021/04/24 09:00] – [Links2 Web Browser] - typo mortifishowto:linuxapps [2022/02/08 07:03] (current) – [Links2 Web Browser] Added a "security considerations" section for the Links2 script. Andre
Line 17: Line 17:
   $ sudo apt-get install links2   $ sudo apt-get install links2
 </code> </code>
 +
 +=== Links2 Security Considerations ===
 +
 +:!: Note that links2 can give access to the host OS, such as with "OS Shell" from the File menu, which gives the BBS user a shell as the OS user the BBS runs as. At the very least this will likely give someone access to your [[util:scfg|scfg]] tool.
 +
 +Using the script below, anyone with a sysop [[access:level|security level]] will have access to the full Links2 experience, including running an OS shell as whatever user the BBS runs as. The code uses the is_sysop check, which will return true if the user's security level is 90-99 ([[https://synchro.net/docs/jsobjs.html|Object reference]]).
 +
 +Anyone without a sysop security level will run Links2 with the "-anonymous" switch, which disables numerous features, including the ability to use "OS Shell" from the menu.
 +
 +<code>
 +-anonymous
 +Restrict links so that it can run on an anonymous account. No local file browsing. No downloads. Executing of viewers is allowed, but user can't add or modify entries in association table.
 +</code>
 +
 +This may be sufficient to secure the BBS' host system, but the user will still be allowed to browse the web from your system, potentially doing questionable things that could be attributed to your IP address.
  
 === Add links2 to SBBS === === Add links2 to SBBS ===
Line 48: Line 63:
 === Add to Synchronet Command Shell === === Add to Synchronet Command Shell ===
  
-edit your *.src command shell script and add:+edit your *.src [[custom:command_shell|command shell]] script and add:
   ie: cmdkey /B   ie: cmdkey /B
           exec_bin "links2.js"           exec_bin "links2.js"
Line 80: Line 95:
                 console.pause();                 console.pause();
                 google = google.replace(' ', '+');                 google = google.replace(' ', '+');
-                 +                if(user.is_sysop) 
-                bbs.exec('links2 "google.com/search?q='+google+'"', EX_STDIO|EX_NATIVE|EX_NOLOG);+                    bbs.exec('links2 "google.com/search?q='+google+'"', EX_STDIO|EX_NATIVE|EX_NOLOG) 
 +                else 
 +                    bbs.exec('links2 -anonymous "google.com/search?q='+google+'"', EX_STDIO|EX_NATIVE|EX_NOLOG);
                 console.putmsg('\r\n\r\n\1g  Returning to '+system.name);                 console.putmsg('\r\n\r\n\1g  Returning to '+system.name);
                 mswait(1000);                 mswait(1000);
Line 93: Line 110:
                 if (v < 0) {                 if (v < 0) {
                         url = 'http://www.aboutlinux.info/2007/02/links2-cross-platform-console-based-web.html';                         url = 'http://www.aboutlinux.info/2007/02/links2-cross-platform-console-based-web.html';
-                        mswait(1000); +                }                
- +
-                }+
                 console.putmsg('\r\n\r\n\1n \1gLoading links2 \r\n');                 console.putmsg('\r\n\r\n\1n \1gLoading links2 \r\n');
                 console.putmsg(' \1h\1yQ\1n\1guits the browser.\r\n\r\n');                 console.putmsg(' \1h\1yQ\1n\1guits the browser.\r\n\r\n');
                 console.pause();                 console.pause();
                 url = url.replace(' ', '+');                 url = url.replace(' ', '+');
-                bbs.exec('links2 "'+url+'"', EX_STDIO|EX_NATIVE|EX_NOLOG);+                 
 +                if(user.is_sysop) 
 +                    bbs.exec('links2 "'+url+'"', EX_STDIO|EX_NATIVE|EX_NOLOG) 
 +                else 
 +                    bbs.exec('links2 -anonymous "'+url+'"', EX_STDIO|EX_NATIVE|EX_NOLOG);
                 console.putmsg('\r\n\r\n\1g  Returning to '+system.name);                 console.putmsg('\r\n\r\n\1g  Returning to '+system.name);
                 mswait(1000);                 mswait(1000);
Line 111: Line 130:
                 exit();                 exit();
         break;         break;
 +}
 +</code>
  
-        case '^M': +===== WeeChat IRC Client ===== 
-        console.putmsg('\r\n\1g Returning to '+system.name);+ 
 +WeeChat (Wee Enhanced Environment for Chat) makes for a decent IRC client alternative to the stock irc.js client. 
 + 
 +First, install Weechat under Debian type: 
 + 
 +  $ sudo apt-get install weechat 
 +   
 +add WeeChat as an external program similar to Links2  
 +( the script's bbs.exec('whatever', <args>); are the same to redirect i/o so no need to add it in SCFG ) 
 + 
 +add a cmdkey ... end_cmd entry in your command shell similar to links2 above, if desired. 
 + 
 +=== example weechat js === 
 + 
 +Weechat looks for a configuration file in /home/<user>/.weechat/irc.conf to get the username/channel/etc information 
 +so wee need to setup a new config for each user/connection, to do this we apply some hackery: 
 + 
 +<code> 
 +load("sbbsdefs.js"); 
 + 
 +var enable; 
 +var server; 
 +var port; 
 +var chan; 
 +var lusr = user.alias; 
 + 
 +var quit_msg = system.name+' - WeeChat 1.6 Linux'; // todo random quit messages 
 + 
 +var irc = load("modopts.js", "weechat"); 
 + 
 +if(irc.enabled == undefined) enabled = true; 
 +    else enabled = irc.enabled; 
 +if(irc.chan === undefined) chan = '#synchronet'; 
 +    else chan = irc.chan; 
 +if(irc.server === undefined) servers = 'irc.synchro.net'; 
 +    else server = irc.servers; 
 + 
 +var infile = system.ctrl_dir+'irc-weechat.conf'; 
 +var outfile = system.ctrl_dir+'irc-weechat.tmp'; 
 +var weechat = '/home/sbbs/.weechat/irc.conf'; 
 +var wc_bup = '/home/sbbs/.weechat/irc-'+strftime("%Y-%m%d_%H%M", time())+'.conf'; 
 +var save_prefs = system.data_dir+'wc-prefs.'+user.number; 
 + 
 +if(!file_exists(weechat) || !enabled) { 
 +        if(!enabled) { 
 +            writeln('\r\n\r\n\1rWeechat is disabled\r\n\r\n'); 
 +        } else { 
 +            writeln('\r\n\r\n\1rirc.conf missing.\r\n'); 
 +            mswait(500); 
 +            writeln('\1cTrying default irc client\r\n\r\n'); 
 +            load("irc.js"); 
 +            exit(); 
 +        } 
 +} 
 + 
 +var line; 
 +var count; 
 + 
 +var inf = new File(infile); 
 +var out = new File(outfile); 
 + 
 +writeln('\r\n\r\n \1gLoading IRC WeeChat 1.6\r\n'); 
 +writeln('\1g AlleyCat! BBS attempts connect to: \r\n'); 
 +writeln('   \1h\1yServer:  \1w'+servers); 
 +writeln('   \1h\1yChannel: \1w'+chan); 
 +writeln('   \1h\1yNick:    \1w'+lusr+'\r\n\r\n'); 
 + 
 +var cont = console.noyes('Would you like to Connect to IRC '); 
 +if(cont) { 
 +    console.putmsg('\r\n\1r Aborting...\r\n\r\n'); 
 +    exit(0); 
 +} 
 + 
 +console.putmsg('\r\n \1g[\1h\1yC\1g] ontinue to IRC   [\1wE\1g] dit Connection   [\1wQ\1g] uit\r\n\r\n Whadda ya wanna do? '); 
 +var goon = console.getkey().toUpperCase(); 
 +if(goon != "Q" && goon != "E") goon = "C"; 
 +switch(goon) { 
 +    case 'Q': 
 +        writeln(' Returning to '+system.name+' \r\n\r\n');
         mswait(1000);         mswait(1000);
         exit();         exit();
-        break;+    break; 
 + 
 +    case 'E': 
 +        console.putmsg('\r\n\r\n \1gChannel: \1w'); 
 +        var chan1 = console.getstr(); 
 +        if(chan1 != '') 
 +            chan = chan1; 
 +        console.putmsg('\1g Nick: \1w'); 
 +        var lusr1 = console.getstr(); 
 +        if(lusr1 != '') 
 +            lusr = lusr1; 
 +        console.putmsg('\r\n\1gUsing nick: \1h\1y'+lusr+' \1gand joining channel \1h\1y'+chan+'\r\n'); 
 +        mswait(1000); 
 +    break;
 } }
 +
 +inf.open("r");
 +out.open("w+");
 +
 +count = 0;
 +
 +while(!inf.eof) {
 +        line = inf.readln().trim();
 +        if(line.toUpperCase() !== "[SERVER]" && line !== null) { // dump the default settings ...
 +                out.writeln(line);
 +                count++;
 +        }
 +        else { // found [server] , this section needs to be replace with sbbs user credentials
 +            out.writeln('[server]');
 +            out.writeln('synchronet.proxy');
 +            out.writeln('synchronet.ipv6');
 +            out.writeln('synchronet.ss');
 +            out.writeln('synchronet.ssl_cert');
 +            out.writeln('synchronet.ssl_priorities');
 +            out.writeln('synchronet.ssl_dhkey_size');
 +            out.writeln('synchronet.ssl_fingerprint');
 +            out.writeln('synchronet.ssl_verify');
 +            out.writeln('synchronet.password');
 +            out.writeln('synchronet.capabilities');
 +            out.writeln('synchronet.sasl_mechanism');
 +            out.writeln('synchronet.sasl_username');
 +            out.writeln('synchronet.sasl_password');
 +            out.writeln('synchronet.sasl_key');
 +            out.writeln('synchronet.sasl_timeout');
 +            out.writeln('synchronet.sasl_fail');
 +            out.writeln('synchronet.autoconnect = on');
 +            out.writeln('synchronet.autoreconnect');
 +            out.writeln('synchronet.autoreconnect_delay');
 +            out.writeln('synchronet.nicks_alternate');
 +            out.writeln('synchronet.local_hostname');
 +            out.writeln('synchronet.command');
 +            out.writeln('synchronet.command_delay');
 +            out.writeln('synchronet.autojoin = "'+chan+'"');
 +            out.writeln('synchronet.autorejoin ');
 +            out.writeln('synchronet.autorejoin_delay');
 +            out.writeln('synchronet.connection_timeout');
 +            out.writeln('synchronet.anti_flood_prio_high');
 +            out.writeln('synchronet.anti_flood_prio_low');
 +            out.writeln('synchronet.away_check');
 +            out.writeln('synchronet.away_check_max_nicks');
 +            out.writeln('synchronet.msg_kick');
 +            out.writeln('synchronet.msg_part');
 +            out.writeln('synchronet.sasl_timeout');
 +            out.writeln('synchronet.sasl_fail');
 +            out.writeln('synchronet.autoconnect = on');
 +            out.writeln('synchronet.autoreconnect');
 +            out.writeln('synchronet.autoreconnect_delay');
 +            out.writeln('synchronet.nicks_alternate');
 +            out.writeln('synchronet.local_hostname');
 +            out.writeln('synchronet.command');
 +            out.writeln('synchronet.command_delay');
 +            out.writeln('synchronet.autojoin = "'+chan+'"');
 +            out.writeln('synchronet.autorejoin ');
 +            out.writeln('synchronet.autorejoin_delay');
 +            out.writeln('synchronet.connection_timeout');
 +            out.writeln('synchronet.anti_flood_prio_high');
 +            out.writeln('synchronet.anti_flood_prio_low');
 +            out.writeln('synchronet.away_check');
 +            out.writeln('synchronet.away_check_max_nicks');
 +            out.writeln('synchronet.msg_kick');
 +            out.writeln('synchronet.msg_part');
 +            out.writeln('synchronet.msg_quit = "' + quit_msg+'"');
 +            out.writeln('synchronet.notify');
 +            out.writeln('synchronet.nicks = "' + lusr + ',' + lusr+'_,' + '_' + lusr + '_"');
 +            out.writeln('synchronet.username = "' + lusr.toLowerCase() + '"');
 +            out.writeln('synchronet.realname = "' + lusr + ' @ ' + system.name + ' [WeeChat 1.6]"');
 +            out.writeln('synchronet.addresses = "' + servers + '"');
 +            out.writeln();
 +            count += 41;
 +            console.pause();
 +            out.close(); // yes, [server] is actually the last [section] in weechat irc.conf
 +        }
 +}
 +
 +inf.close();
 +out.close();
 +file_rename(weechat, wc_bup);
 +file_copy(outfile, weechat);
 +bbs.exec('weechat', EX_STDIO|EX_NATIVE|EX_NOLOG); // execute bash>weechat redirecting stdout back to sbbs
 +
 +console.pause();
 +writeln('\r\n\r\n \1gReturning to \1c'+system.name);
 +mswait(1000);
 </code> </code>
 +===== =====
 +
 ===== See Also ===== ===== See Also =====
   * [[:howto:|howto index]]   * [[:howto:|howto index]]

Trace: