Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 27 Jan 1998 15:08:09 +0000
From:      Keith Jones <keith@blueberry.co.uk>
To:        Paul Dekkers <paul@cgu.ml.org>
Cc:        questions@FreeBSD.ORG
Subject:   Re: Prevent user from skinnpping commands
Message-ID:  <19980127150809.12042@blueberry.co.uk>
In-Reply-To: <199801271416.PAA06212@chippie.cgu.edusurf.nl>; from Paul Dekkers on Tue, Jan 27, 1998 at 03:16:41PM %2B0100
References:  <199801271416.PAA06212@chippie.cgu.edusurf.nl>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Jan 27, 1998 at 03:16:41PM +0100, Paul Dekkers wrote:

> How can I prevent a user from skipping commands by using Ctrl-C or Ctrl-Z
> or can I better (and how) disable the whole commands?
> My goal is to let a user log in, start something in .profile and
> immediately log out without being able to use Ctrl-C to get shell
> access... :-)

Simply change their login shell in /etc/master.passwd to the program
you want to start. If you use 'adduser' it might complain a bit, but
you can safely ignore the warning messages.

Additionally if their login shell doesn't appear in /etc/shells they
won't be able to login via FTP, but that's probably a bonus anyway.

Oh, and bear in mind that most mailreaders etc. have 'shell' and 'pipe'
options which will allow people to gain shell access and/or execute commands
on your machine.

Keith
--
<insert corporate .sig here>



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19980127150809.12042>