home *** CD-ROM | disk | FTP | other *** search
- Path: sparky!uunet!pipex!bnr.co.uk!uknet!mcsun!sunic!aun.uninett.no!nuug!ifi.uio.no!jonr
- From: jonr@ifi.uio.no (Jon Ross)
- Newsgroups: comp.unix.shell
- Subject: Re: How to make Restrict Shell more safely?
- Message-ID: <CMM.0.90.2.726306756.jonr@solva.ifi.uio.no>
- Date: 6 Jan 93 07:52:36 GMT
- References: <cslee.225.726145569@pds.nchu.edu.tw>
- <1993Jan4.194925.7364@crd.ge.com> <1993Jan4.200035.7840@crd.ge.com>
- <1ibbd7INNiml@mudos.ann-arbor.mi.us>
- <1993Jan5.165446.15449@crd.ge.com>
- Sender: jonr@ifi.uio.no (Jon Ross)
- Organization: University of Oslo, Norway
- Lines: 14
- Nntp-Posting-Host: solva.ifi.uio.no
- In-Reply-To: davidsen@ariel.crd.GE.COM (william E Davidsen)'s message of 5
- Jan 93 16:54:46 GMT
- Originator: jonr@solva.ifi.uio.no
-
- In article <1993Jan5.165446.15449@crd.ge.com> davidsen@ariel.crd.GE.COM (william E Davidsen) writes:
-
- > In article <1ibbd7INNiml@mudos.ann-arbor.mi.us>, mju@mudos.ann-arbor.mi.us (Marc Unangst) writes:
- > | In article <1993Jan4.200035.7840@crd.ge.com> davidsen@crd.ge.com (bill davidsen) writes:
- > | Hmm. Is vi part of the /guest/bin environment? If so, all the user
- > | has to do is "vi foo", then do ":set shell=/bin/sh" and ":!/bin/sh".
- > | Presto, they have an unrestricted shell.
- On my Sun SS2 running SunOS 4.1.3, after trying the trick above,
- as a user with /usr/lib/rsh as login shell, i get this error
- message from vi:
- sh: /bin/sh: restricted
- And vi doesn't shell out.
-
- Jon R.
-