Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 1 Mar 2005 21:31:07 +0100
From:      Max Laier <max@love2party.net>
To:        freebsd-hackers@freebsd.org
Cc:        Matt <mhersant@comcast.net>
Subject:   Re: retricted environment
Message-ID:  <200503012131.15528.max@love2party.net>
In-Reply-To: <4224CF06.7060103@comcast.net>
References:  <4224CF06.7060103@comcast.net>

next in thread | previous in thread | raw e-mail | index | archive | help
--nextPart277483390.gHWZcVMIyF
Content-Type: text/plain;
  charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

On Tuesday 01 March 2005 21:22, Matt wrote:
> When providing a shell environment for a larger number of users, what is
> the best way to retrict access to commands/resources?  I've already
> setup quotas.  I don't want users playing with system commands.  I've
> read something about a retricted shell, but can't find any details.

I am not sure a restricted shell is the best sollution for interactive setu=
ps,=20
but one is availale from src/contrib/sendmail/smrsh.  See README for usage=
=20
and build information.  This, however, is more a thing for cvs-wrappers or=
=20
stuff like that.

=46or interactive environments you can use the normal group/user permission=
s and=20
of course jail(8)s.

=2D-=20
/"\  Best regards,                      | mlaier@freebsd.org
\ /  Max Laier                          | ICQ #67774661
 X   http://pf4freebsd.love2party.net/  | mlaier@EFnet
/ \  ASCII Ribbon Campaign              | Against HTML Mail and News

--nextPart277483390.gHWZcVMIyF
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (FreeBSD)

iD8DBQBCJNETXyyEoT62BG0RAjJwAJ4zj0sU7JYWJ5Y5aFsp2YlsmKnlegCdH0sF
dtygorzTmqigFJ0SrHReAuk=
=MueK
-----END PGP SIGNATURE-----

--nextPart277483390.gHWZcVMIyF--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200503012131.15528.max>