security: disable execution of xterm (and any term), related to #18 (…

…just disabling directly w/o apparmor) also set http_proxy and https_proxy globally
oldweb-today · Dec 10, 2015 · 73efea7 · 73efea7
1 parent 8041e1f
commit 73efea7
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 1 deletion.
diff --git a/browsers/base-browser/entry_point.sh b/browsers/base-browser/entry_point.sh
@@ -14,14 +14,20 @@ Xvfb $DISPLAY -screen 0 $GEOMETRY -ac +extension RANDR &
 bash /novnc/utils/launch.sh --vnc localhost:5900 &
 
 
-http_proxy=http://netcapsule_pywb_1:8080  wget -O /tmp/res "http://set.pywb.proxy/setts?ts=$TS"
+export http_proxy=http://netcapsule_pywb_1:8080
+export https_proxy=http://netcapsule_pywb_1:8080
+wget -O /dev/null "http://set.pywb.proxy/setts?ts=$TS"
 
 
 function shutdown {
   kill -s SIGTERM $NODE_PID
   wait $NODE_PID
 }
 
+# disable any terms
+sudo chmod a-x /usr/bin/*term
+sudo chmod a-x /bin/*term
+
 # Run browser here
 eval "$@" &
 

diff --git a/browsers/mosaic/run.sh b/browsers/mosaic/run.sh
@@ -1,5 +1,7 @@
 #!/bin/bash
 
+unset http_proxy
+unset https_proxy
 #fluxbox -display $DISPLAY -log /tmp/fluxbox.log &
 fvwm -d $DISPLAY &