Skip site navigation (1)Skip section navigation (2)
Date:      03 Sep 2002 17:22:28 -0400
From:      Lowell Gilbert <freebsd-questions-local@be-well.no-ip.com>
To:        freebsd-questions@freebsd.org
Subject:   Re: restricted shell
Message-ID:  <44znuyahuz.fsf@be-well.ilk.org>
In-Reply-To: <20020903155040.GA66479@studnet.sk>
References:  <20020903155040.GA66479@studnet.sk>

next in thread | previous in thread | raw e-mail | index | archive | help
Radko Keves <rado@studnet.sk> writes:

> hi all i have question about restricted shell (for example rbash)
> SHELL enviroment is read only, but user can run another shell if is in PATH, can i disallow changing shell?
> i don't want get out all shells of PATH  (because there is a problem with . option in path and users own programs)

If users are allowed to run their own programs, they will have little
trouble getting an unrestricted shell if they want to.  If you are
trying to do this as a form of security, you'll need to use chroot(8)
or jail(8).

Restricted shells are primarily useful for cases where you're trying
to avoid shooting yourself in the foot, not where you need to stop a
possibly malicious user.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?44znuyahuz.fsf>