How JumpServer Blocks Dangerous rm -rf Commands and Records Full Sessions with a Single Command

What is JumpServer

JumpServer is an open‑source bastion host project launched in 2014. The GitHub repository has over 30,000 stars and the community edition has been deployed more than 500,000 times. The codebase is written in Python and Django and is released under the GPLv3 license.

Supported Asset Types

Linux servers and network devices : Access via SSH, including switches, routers and firewalls; SFTP file transfer is built‑in.

Windows Remote Desktop : RDP sessions can be rendered in the browser or launched with a native client.

Databases : MySQL, Oracle, SQLServer, PostgreSQL, Redis, MongoDB and ClickHouse are supported; SQL statements are logged.

Kubernetes, web sites and applications : Direct pod access, web admin panels (e.g., Jenkins, GitLab) and Windows applications via RemoteApp.

Permission Management

Permissions can be granted to individual users or groups for specific assets, specifying the login account and allowed actions. Temporary permissions can be set with an expiration time and are automatically revoked.

Multi‑factor authentication (MFA) is supported through dynamic tokens such as Google Authenticator, and JumpServer can integrate with LDAP, AD or OAuth2 directories.

Operation Auditing

All sessions are recorded as video files that can be replayed at variable speed. Command execution is logged and searchable by keyword. File transfers are also logged with details about the file name, size and timestamp.

High‑risk commands can be blocked. For example, the rule rm -rf prevents execution of that command unless it is approved, and administrators can view live sessions and terminate them if necessary.

Usage Modes

Browser access : No plugin required; Chrome can open SSH, Windows desktop and database sessions directly in tabs.

Local client : JumpServer Client is available for Windows, macOS and Linux, allowing connections to be opened in native terminal or database tools.

Quick Start

Prepare a clean 64‑bit Linux machine (minimum 4 CPU, 8 GB RAM) with root access and internet connectivity.

curl -sSL https://resource.fit2cloud.com/jumpserver/jumpserver/releases/latest/download/quick_start.sh | bash

Or use the GitHub source:

curl -sSL https://github.com/jumpserver/jumpserver/releases/latest/download/quick_start.sh | bash

After installation, open a browser and navigate to http://<em>server‑IP</em>/. Log in with the default credentials admin / ChangeMe and change the password on first login.

Add assets in the asset management page (IP, protocol, port, login account).

Create users and assign authorization rules to bind assets to the appropriate people.

Switch to a regular user view, open a Web Terminal, test a command and file transfer, then verify the audit video on the management side.

Open‑Source Repository

https://github.com/jumpserver/jumpserver