disallowing subshell in More
Geoff Kuenning
geoff at desint.UUCP
Tue Feb 12 14:22:44 AEST 1985
In article <362 at men1.UUCP> ron at men1.UUCP (Ron Flax) writes:
>Here's the senario, I have a menu that allows certain users to have root access
>to several functions (unjamming the print queue, archiving & restoring files,
>etc). One of the options is to allow the user to get a listing of a tape
>archive to the screen (piped through More) which of course allows the user to
>type a '!sh<return>' and viola! a root shell.
How about piping the listing into
su real-user-id -c "more"
--
Geoff Kuenning
Unix Consultant
...!ihnp4!trwrb!desint!geoff
More information about the Comp.unix.wizards
mailing list