From owner-freebsd-security  Wed May  8 11:27:55 2002
Delivered-To: freebsd-security@freebsd.org
Received: from anchor-post-35.mail.demon.net (anchor-post-35.mail.demon.net [194.217.242.93])
	by hub.freebsd.org (Postfix) with ESMTP id 3F97637B405
	for <freebsd-security@freebsd.org>; Wed,  8 May 2002 11:27:50 -0700 (PDT)
Received: from caomhin.demon.co.uk ([212.228.234.119])
	by anchor-post-35.mail.demon.net with esmtp (Exim 3.35 #1)
	id 175WAE-0007Q4-0Z; Wed, 08 May 2002 19:27:48 +0100
Message-ID: <q6sOtCBrpW28Ew$9@caomhin.demon.co.uk>
Date: Wed, 8 May 2002 19:11:55 +0100
To: martin@dc.cis.okstate.edu
Cc: freebsd-security@FreeBSD.ORG
From: Kevin Golding <kevin@caomhin.demon.co.uk>
Subject: Re: Accounts with Restricted privileges
References: <200205081623.g48GNkl89410@dc.cis.okstate.edu>
In-Reply-To: <200205081623.g48GNkl89410@dc.cis.okstate.edu>
MIME-Version: 1.0
X-Mailer: Turnpike Integrated Version 5.01 U <qkXGb$aG1KGttk6lmVLrWXtmNK>
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

Someone, quite probably Martin McCormick, once wrote:
>       Is it possible to create an account with a restricted
>shell?
>
>       The documentation for bash shows that it can be invoked
>with the --restricted flag.  A check of the handbook shows
>nothing more about this topic.  Neither did a look at the man
>pages for login.

Copy the bash binary and call it rbash then set the users shell to rbash
and when they login they'll be in a restricted shell.

Kevin
-- 
kevin@caomhin.demon.co.uk

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message