Mikkel <mik...@infinity-ltd.com> writes:
> You may also want to consider setting his shell to rbash. See the
> "RESTRICTED SHELL" section of the bash man page.

Treat rbash as a fun puzzle, not as a security measure.  They did block
">" redirects and ./doit file execution, but that is far from enough.
With a few minutes pondering this solution popped up.

    emacs doit
    <insert  "bash -i" without the quotes>
    . doit
    <instant non-restricted shell>

-wolfgang
-- 
Wolfgang S. Rupprecht      http://www.wsrcc.com/wolfgang/      (IPv6-only)
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines

Reply via email to