lshell.conf

# lshell.py configuration file
# BOA-2.4.3
# $Id: lshell.conf,v 1.27 2010-10-18 19:05:17 ghantoos Exp $

[global]
##  log directory (default /var/log/lshell/ )
logpath         : /var/log/lsh/

##  set log level to 0, 1, 2 or 3  (0: no logs, 1: least verbose)
loglevel        : 4

[default]
##  a list of the allowed commands or 'all' to allow all commands in user's PATH
allowed         : ['bundle', 'bzr', 'cat', 'cd', 'chmod', 'compass', 'composer', 'cp', 'curl', 'cvs', 'diff', 'drush', 'echo', 'find', 'gem-dependency', 'gem-environment', 'gem-list', 'gem-query', 'gem-search', 'git-receive-pack', 'git-upload-archive', 'git-upload-pack', 'git', 'grep', 'guard', 'gunzip', 'gzip', 'less', 'lftp', 'll', 'ls', 'mc', 'mkdir', 'mv', 'mysql', 'mysqldump', 'nano', 'openssl', 'passwd', 'patch', 'ping', 'pwd', 'rm', 'rmdir', 'rsync', 'rvm', 's3cmd', 'sass-convert', 'sass', 'scp', 'scss', 'sed', 'sqlmagic', 'ssh-keygen', 'ssh', 'svn', 'tar', 'touch', 'true', 'unzip', 'vi', 'vim', 'wget', '1']

##  a list of forbidden character or commands
forbidden       : [';', '`', '$(', '${', '--alias-path', '--use-existing', 'core-cli', 'drush archive-restore', 'drush arr', 'drush cli', 'drush conf', 'drush core-config', 'drush core-execute', 'drush core-quick-drupal', 'drush ev', 'drush exec', 'drush qd', 'drush rs', 'drush runserver', 'drush scr', 'drush sha', 'drush shell-alias', 'drush si', 'drush site-ssh', 'drush sql-create', 'drush ssh', 'drush sup', 'drush7 archive-restore', 'drush7 arr', 'drush7 cli', 'drush7 conf', 'drush7 core-config', 'drush7 core-execute', 'drush7 core-quick-drupal', 'drush7 ev', 'drush7 exec', 'drush7 qd', 'drush7 rs', 'drush7 runserver', 'drush7 scr', 'drush7 sha', 'drush7 shell-alias', 'drush7 si', 'drush7 site-ssh', 'drush7 sql-create', 'drush7 ssh', 'drush7 sup', 'hosting_db_server', 'hostmaster', 'master_db', 'os.system', 'php-cli', 'php-eval', 'php-script', 'pm-updatecode', 'self-update', 'selfupdate', 'server_localhost', 'server_master', 'shell', 'site-install', 'site-upgrade', 'rvm install', 'rvm implode', 'rvm get', 'rvm uninstall', 'rvm remove', 'rvm reinstall', 'rvm alias', 'rvm cron', 'rvm pkg', 'rvm export', 'rvm unexport', 'rvm requirements', 'rvm mount', 'rvm user', 'rvm group', 'rvm autolibs']

##  number of warnings when user enters a forbidden value before getting
##  exited from lshell
warning_counter : 3
strict          : 1

##  command aliases list (similar to bash’s alias directive)
aliases         : {'1':'true', 'll':'ls -l --color=auto', 'drush':'drush7', 'drush dbup':'drush7 updatedb', 'drush mup':'drush7 pm-update', 'drush mupc':'drush7 pm-updatecode', 'drush mups':'drush7 pm-updatestatus', 'drush aliases':'drush7 site-alias | egrep -v "(none|hostmaster|hm|server_|platform_|@none|@self)"', 'drush up':'thinkdifferent', 'drush upc':'thinkdifferent', 'drush updatedb':'thinkdifferent', 'drush updb':'thinkdifferent', 'gem-dependency':'gem dependency', 'gem-environment':'gem environment', 'gem-list':'gem list', 'gem-query':'gem query', 'gem-search':'gem search', 'nano':'rnano', 'vi':'rvim', 'vim':'rvim'}

##  introduction text to print (when entering lshell)
intro           : "\n      ======== Welcome to the Aegir, Drush and Compass Shell ========\n\n         Type '?' or 'help' to get the list of allowed commands\n             Note that not all Drush commands are available\n\n       Use RVM and Bundler to manage all your Compass gems! Example:\n             `rvm all do gem install --conservative compass`\n\n       To install RVM use control file and re-login after 15 minutes\n                 `touch ~/static/control/compass.info`\n"

##  update the environment variable $PATH of the user
env_path        : ':/usr/local/bin'

##  allow or forbid the use of scp (set to 1 or 0)
scp             : 1

## forbid scp upload
scp_upload      : 1

## forbid scp download
scp_download    : 1

##  allow of forbid the use of sftp (set to 1 or 0)
sftp            : 1

##  set sort prompt current directory update (default: 0)
prompt_short    : 1

##  list of command allowed to execute over ssh (e.g. rsync, rdiff-backup, etc.)
overssh         : ['cd', 'cp', 'drush', 'drush7', 'git-receive-pack', 'git-upload-archive', 'git-upload-pack', 'git', 'ls', 'mv', 'mysql', 'mysqldump', 'rm', 'rsync', 'scp', 'ssh-add', 'true', '1']

[grp:ltd-shell]
sftp            : 0
forbidden       : + ['--destination']