Re: load a string to paste buffer

2012-05-02 Thread Sinbad
On Wed, May 2, 2012 at 3:02 PM, Sinbad  wrote:
> On Wed, May 2, 2012 at 2:23 PM, Nicholas Marriott
>  wrote:
>> You have an alias or something for tmux.
>>
>>
>> On Wed, May 02, 2012 at 01:00:51PM +0530, Sinbad wrote:
>>> On Wed, May 2, 2012 at 11:50 AM, Nicholas Marriott
>>>  wrote:
>>> > echo string|tmux loadb -, tmux pasteb
>>> >
>>> > Or just use tmux send-keys
>>> >
>>> >
>>> > On Wed, May 02, 2012 at 11:25:52AM +0530, Sinbad wrote:
>>> >> how do i copy a string to tmux paste buffer from bash script.
>>> >> i'm looking for something like this,
>>> >>
>>> >> tmux readbuf < "string"
>>> >>
>>> >> tmux writebuf ? #which will dump the read-contents on to the active 
>>> >> window.
>>> >>
>>> >> how do i do that.
>>> >>
>>> >> cheers
>>> >>
>>> >> --
>>> >> Live Security Virtual Conference
>>> >> Exclusive live event will cover all the ways today's security and
>>> >> threat landscape has changed and how IT managers can respond. Discussions
>>> >> will include endpoint security, mobile security and the latest in malware
>>> >> threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
>>> >> ___
>>> >> tmux-users mailing list
>>> >> tmux-users@lists.sourceforge.net
>>> >> https://lists.sourceforge.net/lists/listinfo/tmux-users
>>>
>>> when i run this command inside tmux in bash shell, i am getting the
>>> following error.
>>>
>>> echo one | tmux loadb -
>>>
>>> sessions should be nested with care. unset $TMUX to force.
>>> -bash: export: `-': not a valid identifier
>
> yes, i have an alias, i am a non-root user, so i compiled in my local
> direcotory.
> and have a path to the tmux binary. along with that i'm also setting one of 
> bash
> ENV variable. my alias is as follows.
>
> alias tmux="/usr/home/sinbad/bin/tmux; export MUX='tmux'"

I found the flaw, my alias is screwed up. thanks for pointing it out Nicholas.

--
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
___
tmux-users mailing list
tmux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/tmux-users


Re: tmux window title on top

2012-05-02 Thread Sinbad
On Wed, May 2, 2012 at 11:48 AM, Nicholas Marriott
 wrote:
> You will have to run tmux from the SVN repo.
>
> On Wed, May 02, 2012 at 10:08:23AM +0530, Sinbad wrote:
>> On Tue, May 1, 2012 at 11:49 AM, Nicholas Marriott
>>  wrote:
>> > set -g status-position top
>> >
>> >
>> > On Tue, May 01, 2012 at 10:26:48AM +0530, Sinbad wrote:
>> >> I just started exploring tmux, i was a long time screen user.
>> >> though screen was sufficient for all my practical purposes,
>> >> wanted to give tmux a try and here i am 'up and running on
>> >> tmux' ;).
>> >>
>> >> how do i move the window title bar location from bottom to
>> >> top, this is one thing i always wanted in screen, but screen
>> >> couldn't do that, can tmux ?
>> >>
>> >> cheers
>> >>
>> >> --
>> >> Live Security Virtual Conference
>> >> Exclusive live event will cover all the ways today's security and
>> >> threat landscape has changed and how IT managers can respond. Discussions
>> >> will include endpoint security, mobile security and the latest in malware
>> >> threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
>> >> ___
>> >> tmux-users mailing list
>> >> tmux-users@lists.sourceforge.net
>> >> https://lists.sourceforge.net/lists/listinfo/tmux-users
>>
>> it says unknown option status-position, i am running tmux 1.6

any idea when the official tmux 1.7 be released ?

--
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
___
tmux-users mailing list
tmux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/tmux-users


A "session encryption" approach?

2012-05-02 Thread Julius Plenz
Hi,

I'd like to implement a feature similar to screen's `password' command
that "encrypts" a session with a password. If a session (or the whole
server) is protected with such a password, attaching a session or
sending any command to a session should be prohibited unless the
correct password is presented.

The use case should be clear: Unauthorized access to a user account
should not instantly lead to root privileges on the local machine
because of a left-open root shell nor to privileges on remote hosts
that you are connected to via SSH from inside a tmux session.

There's an obvious fallacy: If the tmux process runs with user
privileges, you can simply attach to it and/or modify the memory to
bypass this protection. So this would become a rather small hurdle
than a real protection, at least for a skilled attacker.

However, if tmux would be installed as setuid root, then simply
attaching to the server process is not possible. So, from a
theoretical POV, by just installing tmux suid root and adding some
simple privilege dropping mechanisms in the right places, the above
attack could be made impossible. The setuid thing could be made a
compile time option with an appropriate warning, so that the
user/admin can decide.

How feasable is such an approach? Is the effort warranted at all?
And if not: How do you go about protecting open root shells and SSH
sessions? Any comments and thoughts appreciated.

Thanks,

Julius

--
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
___
tmux-users mailing list
tmux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/tmux-users


Re: A "session encryption" approach?

2012-05-02 Thread Thomas Adam
On 2 May 2012 16:07, Julius Plenz  wrote:
> How feasable is such an approach? Is the effort warranted at all?
> And if not: How do you go about protecting open root shells and SSH
> sessions? Any comments and thoughts appreciated.

Why does tmux need to be special with respect to some other random
program, such as wc?  I want to protect wc so users can't count the
lines in my shell's history file.

The solution to the reasoned "problem" to me, solves nothing.

-- Thomas Adam

--
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
___
tmux-users mailing list
tmux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/tmux-users


Re: A "session encryption" approach?

2012-05-02 Thread Stroller

On 2 May 2012, at 16:07, Julius Plenz wrote:
> ...
> I'd like to implement a feature similar to screen's `password' command
> that "encrypts" a session with a password. If a session (or the whole
> server) is protected with such a password, attaching a session or
> sending any command to a session should be prohibited unless the
> correct password is presented.

Previous discussion of this subject:
http://sourceforge.net/mailarchive/message.php?msg_id=28514534

http://sourceforge.net/mailarchive/forum.php?thread_name=20111208181329.GE10824%40yelena.nicm.ath.cx&forum_name=tmux-users

Stroller.


--
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
___
tmux-users mailing list
tmux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/tmux-users