Not sure about restricted shell, but pfksh is used in solaris for RBAC (role
based access control),
which is essentially Solaris's version of sudo, just more tightly integrated
into the OS.
pfexec would allow you to execute commands with a greater privilege than you
have, without using a privileged shell such as pfksh,
So it would allow you to use RBAC with the bash shell or ksh shell.
I don't believe it is available in Linux, I stand to be corrected as I am
primarily a Solaris user.
Hope that helps.
> And for pfksh, I've tried to use pfksh symlink but didn't notice any
> difference. What should be result / how it should work? There is only
> reference
> to pfexec in ksh man pages which seems it's not usually/at all present
> on
> Linux systems. I've found only some information talking about pfexec on
> OpenSolaris with statement "In effect, pfexec functions as a
> passwordless su or
> sudo in Linux." How is this designed to work (on Linux) ? Also, in ksh
> sources
> there is line:
>
> return(execve("/usr/bin/pfexec", argv, envp));
>
> so is it designed to work on Linux (or systems where pfexec is
> missing)?
>
> Regards,
> Michal Hlavinka
> _______________________________________________
> ast-users mailing list
> [email protected]
> https://mailman.research.att.com/mailman/listinfo/ast-users
**********************************************************************
The e-mail and attachments are confidential and intended only for selected
recipients. If you have received it in error, you may not in any way disclose
or rely on the contents. You may not keep, copy or distribute the e-mail.
Should you receive it, immediately notify the sender of the error and delete
the e-mail.Also note that this form of communication is not secure, it can be
intercepted, and may not necessarily be free of errors and viruses in spite of
reasonable efforts to secure this medium.
**********************************************************************
_______________________________________________
ast-users mailing list
[email protected]
https://mailman.research.att.com/mailman/listinfo/ast-users
