SUMMARY: Restricted shell access?

From: Giovanni Navarrette <gio_at_uslink.net>
Date: Fri Jun 14 2002 - 10:38:30 EDT
Hey everyone:

Sorry for taking soo long to get this summary out. Here is what I got back
from everyone (and THANKS for all of the suggestions =D ):

Restricted bourne SHell: (man -s 1m rsh)
Restricted ksh (rksh)
chroot
pdksh (Public Domain Korn Shell) available from http://www.cs.mun.ca/~michael/pdksh/
rbash
---
chrooted bash link
  Some links for creating a chrooted SSH environment:

   http://mail.incredimail.com/howto/openssh/

   http://lists.suse.com/archive/suse-security/1999-Oct/0080.html

   Chrooting All Services in Linux
   http://www.gnujobs.com/Articles/23/chroot.html

   Chroot in Solaris
   http://ssh.inet-one.com/dir.2000-09/msg00035.html
---

One thing that was noted by many that perl could be used to bypass the
security and run commands with the system() call. So I'll have to work on
that one...., but I can restrict shell access with the methods above. I'm
going to try the pdksh shell and see how far I can go with that. 

Thanks everyone for the suggestions, have a g'day.

-------------------------------------
Giovanni Navarrette
USLink Internet Systems Administrator
e-Mail: gio@uslink.net
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers
Received on Fri Jun 14 10:42:22 2002

This archive was generated by hypermail 2.1.8 : Thu Mar 03 2016 - 06:42:46 EST