From owner-freebsd-security Thu Apr 20 11:29:43 2000 Delivered-To: freebsd-security@freebsd.org Received: from rock.ghis.net (rock.ghis.net [209.222.164.7]) by hub.freebsd.org (Postfix) with ESMTP id 8B72937B6C6 for ; Thu, 20 Apr 2000 11:29:38 -0700 (PDT) (envelope-from will@blackdawn.com) Received: from argon.blackdawn.com (deepspace9.dcds.edu [207.231.151.2]) by rock.ghis.net (8.9.3/8.9.3) with ESMTP id LAA12408; Thu, 20 Apr 2000 11:29:29 -0700 (PDT) Received: by argon.blackdawn.com (Postfix, from userid 1000) id A57E2191B; Thu, 20 Apr 2000 14:28:47 -0400 (EDT) Date: Thu, 20 Apr 2000 14:28:47 -0400 From: Will Andrews To: Stephane.Lentz@ansf.alcatel.fr Cc: security@FreeBSD.ORG Subject: Re: restricted accounts : restricting access/programs solutions Message-ID: <20000420142847.B395@argon.blackdawn.com> References: <20000420200127.A9188@nsfws7.ansf.alcatel.fr> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0.1i In-Reply-To: <20000420200127.A9188@nsfws7.ansf.alcatel.fr>; from Stephane.Lentz@ansf.alcatel.fr on Thu, Apr 20, 2000 at 08:01:27PM +0200 X-Operating-System: FreeBSD 5.0-CURRENT i386 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Please don't use mail clients that allow lines longer than 80 characters. (I would prefer 76, but 80 is fine). On Thu, Apr 20, 2000 at 08:01:27PM +0200, Stephane.Lentz@ansf.alcatel.fr wrote: > I just found another way to restrict shell access : flash > (http://www.netsoc.ucd.ie/flash/) which is a ncurses application that > will only execute administrator defined programs. Any opinion on this > product ? As the maintainer of the shells/flash port, I can only say that it seems flash is mildly useful and user-friendly. It needs more development but probably could be used in a production environment. I'm certain there are other programs like flash that you can use. -- Will Andrews GCS/E/S @d- s+:+>+:- a--->+++ C++ UB++++ P+ L- E--- W+++ !N !o ?K w--- ?O M+ V-- PS+ PE++ Y+ PGP+>+++ t++ 5 X++ R+ tv+ b++>++++ DI+++ D+ G++>+++ e->++++ h! r-->+++ y? To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message