Synchronet v3.20b-Win32 (install) has been released (Jan-2025).

You can donate to the Synchronet project using PayPal.

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
howto:linuxapps [2021/04/24 14:03] – remember this script is shared publically so remove profanity :-) mortifishowto:linuxapps [2022/02/08 07:03] (current) – [Links2 Web Browser] Added a "security considerations" section for the Links2 script. Andre
Line 17: Line 17:
   $ sudo apt-get install links2   $ sudo apt-get install links2
 </code> </code>
 +
 +=== Links2 Security Considerations ===
 +
 +:!: Note that links2 can give access to the host OS, such as with "OS Shell" from the File menu, which gives the BBS user a shell as the OS user the BBS runs as. At the very least this will likely give someone access to your [[util:scfg|scfg]] tool.
 +
 +Using the script below, anyone with a sysop [[access:level|security level]] will have access to the full Links2 experience, including running an OS shell as whatever user the BBS runs as. The code uses the is_sysop check, which will return true if the user's security level is 90-99 ([[https://synchro.net/docs/jsobjs.html|Object reference]]).
 +
 +Anyone without a sysop security level will run Links2 with the "-anonymous" switch, which disables numerous features, including the ability to use "OS Shell" from the menu.
 +
 +<code>
 +-anonymous
 +Restrict links so that it can run on an anonymous account. No local file browsing. No downloads. Executing of viewers is allowed, but user can't add or modify entries in association table.
 +</code>
 +
 +This may be sufficient to secure the BBS' host system, but the user will still be allowed to browse the web from your system, potentially doing questionable things that could be attributed to your IP address.
  
 === Add links2 to SBBS === === Add links2 to SBBS ===
Line 48: Line 63:
 === Add to Synchronet Command Shell === === Add to Synchronet Command Shell ===
  
-edit your *.src command shell script and add:+edit your *.src [[custom:command_shell|command shell]] script and add:
   ie: cmdkey /B   ie: cmdkey /B
           exec_bin "links2.js"           exec_bin "links2.js"
Line 158: Line 173:
 var infile = system.ctrl_dir+'irc-weechat.conf'; var infile = system.ctrl_dir+'irc-weechat.conf';
 var outfile = system.ctrl_dir+'irc-weechat.tmp'; var outfile = system.ctrl_dir+'irc-weechat.tmp';
-var weechat = '/home/pi/.weechat/irc.conf'; +var weechat = '/home/sbbs/.weechat/irc.conf'; 
-var wc_bup = '/home/pi/.weechat/irc-'+strftime("%Y-%m%d_%H%M", time())+'.conf';+var wc_bup = '/home/sbbs/.weechat/irc-'+strftime("%Y-%m%d_%H%M", time())+'.conf';
 var save_prefs = system.data_dir+'wc-prefs.'+user.number; var save_prefs = system.data_dir+'wc-prefs.'+user.number;
  

Trace: