SUMMARY:How to prevent users from running a shell (command)

From: M selcukkaraca <selcuk.karaca_at_aski.gov.tr>
Date: Fri, 12 May 2000 15:27:56 -0700

Very much tanks for your interest and feelings to help ;
Dave Simmonds,
HTH, Joerg Bruehe
Rick Greene
Tony Hoover


Mainly those people suggested me to put an "exec" in front of the
application. i.e.
in .profile..
...
exec runform30 [parameters]
exit
EOF

this will prevent also running a shell behind of the application and to
recover some resources..the question of the how users come into shell
responded as ;
shell interprest the lines in .profile. and if interpretation is cut -in
away- shell stops interpretation and comes to the prompt. this is because of
the -possiblty - -e flag

The other suggestion was to use a restricted shell which does not allow user
to leave his home dir.
And the last one to use a script for the shell (which is defined in the
etc/shells)

I have been using exec solution and it's working ...

selcuk.karaca_at_aski.gov.tr
Unix sys Admin
ASKI - ANKARA
Received on Fri May 12 2000 - 12:28:36 NZST

This archive was generated by hypermail 2.4.0 : Wed Nov 08 2023 - 11:53:40 NZDT