From owner-freebsd-questions Tue Jan 27 07:09:04 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id HAA29964 for questions-outgoing; Tue, 27 Jan 1998 07:09:04 -0800 (PST) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from intranet.blueberry.co.uk (intranet.blueberry.co.uk [195.129.9.107]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id HAA29958 for ; Tue, 27 Jan 1998 07:08:52 -0800 (PST) (envelope-from keith@intranet.blueberry.co.uk) Received: (from keith@localhost) by intranet.blueberry.co.uk (8.8.8/8.8.7) id PAA17450; Tue, 27 Jan 1998 15:08:09 GMT (envelope-from keith) Message-ID: <19980127150809.12042@blueberry.co.uk> Date: Tue, 27 Jan 1998 15:08:09 +0000 From: Keith Jones To: Paul Dekkers Cc: questions@FreeBSD.ORG Subject: Re: Prevent user from skinnpping commands References: <199801271416.PAA06212@chippie.cgu.edusurf.nl> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 0.84e In-Reply-To: <199801271416.PAA06212@chippie.cgu.edusurf.nl>; from Paul Dekkers on Tue, Jan 27, 1998 at 03:16:41PM +0100 Organization: Blueberry New Media Ltd. Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk On Tue, Jan 27, 1998 at 03:16:41PM +0100, Paul Dekkers wrote: > How can I prevent a user from skipping commands by using Ctrl-C or Ctrl-Z > or can I better (and how) disable the whole commands? > My goal is to let a user log in, start something in .profile and > immediately log out without being able to use Ctrl-C to get shell > access... :-) Simply change their login shell in /etc/master.passwd to the program you want to start. If you use 'adduser' it might complain a bit, but you can safely ignore the warning messages. Additionally if their login shell doesn't appear in /etc/shells they won't be able to login via FTP, but that's probably a bonus anyway. Oh, and bear in mind that most mailreaders etc. have 'shell' and 'pipe' options which will allow people to gain shell access and/or execute commands on your machine. Keith --