For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Raynewalk's avatar
Raynewalk
Icon for Nimbostratus rankNimbostratus
Oct 19, 2016

Guest access via CLI which TMOS commands can be executed

I have created a Guest account with TMSH access. I have the following list of commands available:-

 

Can anyone tell me if the commands to change configuration such as 'create' 'delete' 'edit' would work or not be permitted if attempted. I do not want them to work as this user will be exposed to an external supplier tool, which needs configuraton information but expressly should not be allowed to make any changes.

 

I realise I could try to create or delete something but I do not have a test system and unlikely to get the opportunity to try this.

 

Thanks

 

security
TMOS
TMSH

1 Reply

  • Jinshu's avatar
    Jinshu
    Icon for Cirrus rankCirrus
    Oct 19, 2016

    Dont worry about that..

    Guest user won't be able to create/modify/delete any configurations either in GUI or in CLI.

    guest_user@(big_ip)(cfg-sync In Sync)(/S1-green-P:Active)(/my_partition)(tmos)
guest_user@(big_ip)(cfg-sync In Sync)(/S1-green-P:Active)(/my_partition)(tmos)
guest_user@(big_ip)(cfg-sync In Sync)(/S1-green-P:Active)(/my_partition)(tmos) create ltm ?
Modules:
  profile  Virtual server profile configuration
guest_user@(big_ip)(cfg-sync In Sync)(/S1-green-P:Active)(/my_partition)(tmos) create ltm profile ?
guest_user@(big_ip)(cfg-sync In Sync)(/S1-green-P:Active)(/my_partition)(tmos) create ltm profile ?
guest_user@(big_ip)(cfg-sync In Sync)(/S1-green-P:Active)(/my_partition)(tmos) create ltm profile ?
guest_user@(big_ip)(cfg-sync In Sync)(/S1-green-P:Active)(/my_partition)(tmos) create ltm profile myprofile ?
Syntax Error: "myprofile" unexpected argument
guest_user@(big_ip)(cfg-sync In Sync)(/S1-green-P:Active)(/my_partition)(tmos) create ltm profile
Syntax Error: incomplete command
guest_user@(big_ip)(cfg-sync In Sync)(/S1-green-P:Active)(/my_partition)(tmos)

    -Jinshu