On Thu, Oct 18, 2001 at 11:28:28PM -0400, Brandon Fitch wrote:
> or just use restricted bash.  Has to be version 2.x at minimum.  If
> you create a link called rbash to bash, it will be restricted.  Or
> run it "bash -r".  This also doesn't allow users to change their 
> path, so make sure anything they need is in their path.

It should be noted that setting up a functional restricted shell
environment is a nontrivial operation.  You have to be EXTREMELY
careful what programs you include in the user's path -- if they have
access to anything that permits a shell escape (e.g., vi or less)
then they can probably break out of the restricted shell.

A few Usenet and web searches will probably turn up a suite of Unix-like
programs that have been crippled for usage in a restricted shell.

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to