Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 26 Jan 1998 20:53:31 +0200
From:      Ruslan Shevchenko <Ruslan@Shevchenko.kiev.ua>
To:        Keith Jones <keith@blueberry.co.uk>
Cc:        Paul Dekkers <paul@cgu.ml.org>, questions@FreeBSD.ORG
Subject:   Re: Prevent user from skinnpping commands
Message-ID:  <34CCDBAA.B20D6B50@Shevchenko.kiev.ua>
References:  <199801271416.PAA06212@chippie.cgu.edusurf.nl> <19980127150809.12042@blueberry.co.uk>

next in thread | previous in thread | raw e-mail | index | archive | help
Keith Jones wrote:

> On Tue, Jan 27, 1998 at 03:16:41PM +0100, Paul Dekkers wrote:
>
> ? How can I prevent a user from skipping commands by using Ctrl-C or Ctrl-Z
> ? or can I better (and how) disable the whole commands?
> ? My goal is to let a user log in, start something in .profile and
> ? immediately log out without being able to use Ctrl-C to get shell
> ? access... :-)
>

man trap

> Simply change their login shell in /etc/master.passwd to the program
> you want to start. If you use 'adduser' it might complain a bit, but
> you can safely ignore the warning messages.
>
> Additionally if their login shell doesn't appear in /etc/shells they
> won't be able to login via FTP, but that's probably a bonus anyway.
>
> Oh, and bear in mind that most mailreaders etc. have 'shell' and 'pipe'
> options which will allow people to gain shell access and/or execute commands
> on your machine.
>
> Keith
> --
> ?insert corporate .sig here?



--

    @=
     //RSSH                              mailto://Ruslan@Shevchenko.Kiev.UA






Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?34CCDBAA.B20D6B50>