Restricted Shell - does it still exist.

[A. Lester Buck]

In article <323 at galadriel.bt.co.uk>, pcf at galadriel.bt.co.uk (Pete French) writes:
< The restricted shell was exactly the same as the original shell - execpt it was
< invoked with the name "rsh". /bin/rsh was a link to /bin/sh. On a SUn (or
< any ethernet box indeed) this is a problem since rsh already exists.
< 
< The restricted shell can, luckily, still be run. You just invoke it with
< a '-r' option. So put in your users .profile ...
< 
< exec sh -r
< 
< And he will have a restricted shell.

/bin/rsh enforces its restrictions after the .profile is executed, and any
BREAK or DELETE actions by the user during .profile processing result in his
being logged off.  A persistent rsh user could break out of this scheme
without much trouble by leaning on his interrupt key.


-- 
A. Lester Buck		...!texbell!moray!siswat!buck