ruby-list

立石です。

度々、失礼致します。
rubyを久々に使い始めました。

それでTCPsocketを使用したスクリプトを
作成中なのですが、セキュリティの面での
アドバイスを頂きたいと思いこのメーリング
リストにスクリプトを流します。

スクリプトはPAPで使用されるpap-secretsの
パスワードを変更するもので、root以外の
ユーザからパスワード変更ができるようにするためで、
rootで以下のスクリプトを走らせておき、
ユーザは
	telnet localhost 16016
としてパスワード変更を行なうものです。

実際には、pap-secrets,pap-hosts,pap-logと
３つのファイルも必要となります。

------------[ pap-hosts ]---------------------------
localhost	127.0.0.1
----------------------------------------------------

------------[ pap-secrets ]------------------------
tate	tatespass	???.???.???.?0
hoge	hoge		???.???.???.?1
fuge	fuge		???.???.???.?2
---------------------------------------------------

------------[ pappasswd ]--------------------------
#!/usr/local/bin/ruby

# pappasswd server

require "socket"

PROTOCOL = 16016;
PAP_FILE = "/home/tateishi/work/pappasswd/pap-secrets";
CERT_FILE = "/home/tateishi/work/pappasswd/pap-hosts";
LOG_FILE = "/home/tateishi/work/pappasswd/pap-log";

def certify?(client,file=CERT_FILE)
	addr = client.peeraddr(); # get client info
	address = addr[3];
	host = addr[2];
	log = open(LOG_FILE,"a");
	log.print(host + "\t" + address + "\t" + `date`);
	log.close();
	f = open(file,"r");
	while line = f.gets()
		line.chop!();
		line_list = line.split(/[ \t]+/);
		if (line_list[0] == host)&&(line_list[1] == address) then
			f.close();
			return TRUE;
		end;
	end;
	f.close();
	return FALSE;	
end;

serv = TCPserver.open(PROTOCOL);

while TRUE
	ns = serv.accept();	# open client socket
	if ( ! certify?(ns)) then
		ns.close();
		continue;
	end;
	ns.write("user name: ");
	user_name = ns.gets().chop(); 		# get a user name
	ns.write("old password: ");
	old_passwd = ns.gets().chop();		# get a old password
	ns.write("new password: ");
	new_passwd = ns.gets().chop();		# get a new password

	file = open(PAP_FILE,"r")
	i = 0;
	entry = Array.new();
	while line = file.gets()
		line.chop!();
		entry << line.split(/[ \t]+/);
	end;
	file.close();

	file = open(PAP_FILE,"w");
	for line_entry in entry
		if (line_entry[0]==user_name)&&(line_entry[1]==old_passwd) then
			line_entry[1] = new_passwd;
			ns.write("--------------------------\n");
			ns.write("password is changed.\n");
			ns.write("--------------------------\n");
		end;
		file.print(line_entry.join("\t"));
		file.print("\n");
	end;
	file.close();

	ns.close();		# close a client
end;
------------------------------------------------------------

Thread

Prev Next

In This Thread

Prev Next

[#5492] X Toolkit module — shugo@... (Shugo Maeda)

[#5494] opengl module — Yoshiyuki Kusano <kusano@...>

[#5498] postscript — Kikutani Makoto <kikutani@...>

[#5504] cgi-lib.rb — 青山 和光 <PXN11625@...>

[#5522] Re^2: cgi-lib.rb — 青山 和光 <PXN11625@...>

[#5523] Re^2: cgi-lib.rb — 青山 和光 <PXN11625@...>

[#5525] ruby-1.0-971125 bug — Yoshiyuki Kusano <kusano@...>

[#5534] Re^3: cgi-lib.rb — 青山 和光 <PXN11625@...>

[#5539] ruby 1.0-971204 released — matz@... (Yukihiro Matsumoto)

[#5558] Strange Content-type header on ruby mailing lists — "YOSHIFUJI,Hideaki" <yoshfuji@...>

[#5561] Cgraph module 0.0.1 — Noritsugu Nakamura <nnakamur@...>

[#5563] Re: [Summary 02/02] Re: ruby for perl users — Shin-ichiro Hara <sinara@...>

[#5565] Re: [Summary 02/02] Re: ruby for perlusers — Shin-ichiro Hara <sinara@...>

[#5567] ruby1.1b0 for mswin32 — Masaki Suketa <masaki.suketa@...>

[#5570] OSP'97 — WATANABE Hirofumi <watanabe@...>

[#5578] cannot make GD-1.3 — Shoichi OZAWA <ozawa@...>

[#5587] No subject given — toguchi_takanori@...

[#5591] help — toguchi_takanori@...

[#5592] No subject given — toguchi_takanori@...

[#5593] nyuukai — Hiroyuki Ueki <ueki@...>

[#5607] megawidgets — Kikutani Makoto <kikutani@...>

[#5612] nil problem — takagi@... (TAKAGI Hiromitsu)

[#5615] bug in String#scan ?? — Yuji Shigehiro <sigehiro@...>

[#5621] ruby1.1b0 and tcltklib — Noritsugu Nakamura <nnakamur@...>

[#5632] undef method — keiju@... (Keiju ISHITSUKA)

[#5637] (無題) — Yoshiki Fujikawa <yfuji@...>

[#5638] Ruby 1.1 Reference Manual updated — matz@... (Yukihiro Matsumoto)

[#5640] Postgres module — matz@... (Yukihiro Matsumoto)

[#5644] Re: [ruby-dev:1035] ObjectDBM [ Re: Object#bind ] — keiju@... (石塚圭樹 )

[#5652] How to distinguish 1.1 or lower (was Re: bug in String#scan ??) — Eiji-usagi-MATSUmoto <ematsu@...>

[#5657] Is there alternative way? — KIMURA Koichi <kkimura@...>

[#5660] Re: [ruby-dev:1065] Re: Postgres module — Eiji-usagi-MATSUmoto <ematsu@...>

[#5665] GD-0.4 — 青山 和光 <PXN11625@...>

[#5668] Re: ObjectDBM — 青山 和光 <PXN11625@...>

[#5669] Re: GD-0.4 — 青山 和光 <PXN11625@...>

[#5686] uumerge.rb — Masaki Suketa <masaki.suketa@...>

[#5689] #bye — SAKAI makoto <mkt@...>

[#5690] None — SAKAI makoto <mkt@...>

[#5694] rbdj1209.zip, rbgw1209.zip released — WATANABE Hirofumi <watanabe@...>

[#5699] シェアウェア登録のお願い — CSOUKIN@... (Soukin, Daiko)

[#5701] get a password — tateishi@... (Takaaki TATEISHI)

[#5707] [Q]Error comment? — Hiroyuki Ueki <ueki@...>

[#5712] script to rewrite a pap-secrets — tateishi@... (Takaaki.Tateishi)

[#5726] None — "Takenishi Makoto" <mkt@...>

[#5727] Re^2: GD-0.4 — 青山 和光 <PXN11625@...>

[#5728] Re^2: ObjectDBM — 青山 和光 <PXN11625@...>

[#5732] ruby 1.1b2 released — matz@... (Yukihiro Matsumoto)

[#5734] bug in String#gsub! ?? — Yuji Shigehiro <sigehiro@...>

[#5736] participation. — Gyousuke Mizuno <s3040@...>

[#5740] 参加希望 — Mitsuru Ogino <ogino@...>

[#5742] rbmw1209.lzh — KIMURA Koichi <koichi-ki@...>

[#5745] Re: rbmw1209.lzh — KIMURA Koichi <kbk@...>

[#5746] Re: rbmw1209.lzh — KIMURA Koichi <kbk@...>

[#5751] ruby 1.1b3 released — matz@... (Yukihiro Matsumoto)

[#5761] ruby 1.0-971225 released — matz@... (Yukihiro Matsumoto)

[#5765] File.expand_path — keiju@... (Keiju ISHITSUKA)

[#5769] Re^4: ObjectDBM — 青山 和光 <PXN11625@...>

[#5770] Re^2: ObjectDBM — 青山 和光 <PXN11625@...>

[#5771] Re^4: GD-0.4 — 青山 和光 <PXN11625@...>

[#5772] [1.1b3] tk_thread_safe doesn't work with dynamic link — Kikutani Makoto <kikutani@...>

[#5773] difference of parse between ruby and perl — Noritsugu Nakamura <nnakamur@...>

[ruby-list:5712] script to rewrite a pap-secrets

Thread

In This Thread

[#5504] cgi-lib.rb — 青山　和光 <PXN11625@...>

[#5522] Re^2: cgi-lib.rb — 青山　和光 <PXN11625@...>

[#5523] Re^2: cgi-lib.rb — 青山　和光 <PXN11625@...>

[#5534] Re^3: cgi-lib.rb — 青山　和光 <PXN11625@...>

[#5665] GD-0.4 — 青山　和光 <PXN11625@...>

[#5668] Re: ObjectDBM — 青山　和光 <PXN11625@...>

[#5669] Re: GD-0.4 — 青山　和光 <PXN11625@...>

[#5727] Re^2: GD-0.4 — 青山　和光 <PXN11625@...>

[#5728] Re^2: ObjectDBM — 青山　和光 <PXN11625@...>

[#5769] Re^4: ObjectDBM — 青山　和光 <PXN11625@...>

[#5770] Re^2: ObjectDBM — 青山　和光 <PXN11625@...>

[#5771] Re^4: GD-0.4 — 青山　和光 <PXN11625@...>