Version 2 (modified by Shawn A. Wilson, 5 years ago) (diff)


High-Level Overview

IOVAR Web Shell presently runs in Tomcat on Linux. Thus it has the privileges of the Tomcat user. It is written in Java and shell scripts. Note that even though many of these shell scripts may run in BASH just fine (since the syntax and command names are similar) they are not technically BASH scripts and so there is no guarantee that they will work in any shell but this one.

Aside from parsing commands and executing jobs, part of a shell's function is to keep track of an environment for the user. This environment generally consists of current directory, typed-in command history, executable search path, and other shell-defined and user-defined variables. The IOVAR Web Shell is no different. However, since commands inputted and parsed on one server may in fact point to executables on a different server, there must be a mechanism by which the user's environment can be passed from one server to another. This is currently accomplished by making the environment available at /proc/shell/<hash> (where <hash> is automatically generated) and passing a reference to this location in an HTTP parameter named iosession.