Devin Brown muttered:
> I'm a sysadmin of a Linux server in which users telnet (or ssh) into shells
> using rbash so they can only execute progams I want them to execute.
> right now the only E-Mail client I give them access to is Pine because Mutt
> has a function where you can execute a shell c
Also, look into mount's "noexec" switch, or else users can mail themselves
arbitrary binaries and then save them in the jail and run them.
--
Mike Schiraldi
VeriSign Applied Research
msg25307/pgp0.pgp
Description: PGP signature
> Anyone know a way to do this?
As has been pointed out, any plan that makes it impossible for a smart user
to execute arbitrary programs from within mutt would also cripple mutt.
Usually the right way to handle a situation like you describe is with the
chroot command. It's a bit of a bother, si
Devin, et al --
...and then Devin Brown said...
%
% I'm a sysadmin of a Linux server in which users telnet (or ssh) into shells
% using rbash so they can only execute progams I want them to execute. As of
Interesting.
% right now the only E-Mail client I give them access to is Pine because M
I'm a sysadmin of a Linux server in which users telnet (or ssh) into shells
using rbash so they can only execute progams I want them to execute. As of
right now the only E-Mail client I give them access to is Pine because Mutt
has a function where you can execute a shell command. If the command
