From owner-freebsd-questions Tue Jan 27 08:57:42 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id IAA19673 for questions-outgoing; Tue, 27 Jan 1998 08:57:42 -0800 (PST) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from cam.grad.kiev.ua (grad-UTC-28k8.ukrtel.net [195.5.25.54]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id IAA19577 for ; Tue, 27 Jan 1998 08:57:14 -0800 (PST) (envelope-from Ruslan@Shevchenko.kiev.ua) Received: from Shevchenko.kiev.ua (localhost [127.0.0.1]) by cam.grad.kiev.ua (8.8.8/8.8.5) with ESMTP id UAA09332; Mon, 26 Jan 1998 20:53:37 +0200 (EET) Message-ID: <34CCDBAA.B20D6B50@Shevchenko.kiev.ua> Date: Mon, 26 Jan 1998 20:53:31 +0200 From: Ruslan Shevchenko X-Mailer: Mozilla 4.04 [en] (X11; I; FreeBSD 2.2.5-STABLE i386) MIME-Version: 1.0 To: Keith Jones CC: Paul Dekkers , questions@FreeBSD.ORG Subject: Re: Prevent user from skinnpping commands References: <199801271416.PAA06212@chippie.cgu.edusurf.nl> <19980127150809.12042@blueberry.co.uk> Content-Type: text/plain; charset=koi8-r Content-Transfer-Encoding: 7bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk Keith Jones wrote: > On Tue, Jan 27, 1998 at 03:16:41PM +0100, Paul Dekkers wrote: > > ? How can I prevent a user from skipping commands by using Ctrl-C or Ctrl-Z > ? or can I better (and how) disable the whole commands? > ? My goal is to let a user log in, start something in .profile and > ? immediately log out without being able to use Ctrl-C to get shell > ? access... :-) > man trap > Simply change their login shell in /etc/master.passwd to the program > you want to start. If you use 'adduser' it might complain a bit, but > you can safely ignore the warning messages. > > Additionally if their login shell doesn't appear in /etc/shells they > won't be able to login via FTP, but that's probably a bonus anyway. > > Oh, and bear in mind that most mailreaders etc. have 'shell' and 'pipe' > options which will allow people to gain shell access and/or execute commands > on your machine. > > Keith > -- > ?insert corporate .sig here? -- @= //RSSH mailto://Ruslan@Shevchenko.Kiev.UA