[svlug] editor and shells

Rafael raffi at linwin.com
Sat Jul 29 22:04:01 PDT 2000


On Sat, 29 Jul 2000, Emmanuel-Robert Mayssat wrote:

> Hello,
> 
> I would like to find a way to prevent my users from escaping to a
> shell when running an editor. I would like disable them to cat the
> passwd file for example when I put an exec /path/to/editor in their
> .profile .

Use shadow password file and nobody but root can read it. Most decent
distributions use shadow password file these days.

> 
> HOw can I do that ?

What prevents them to load /etc/passwd into the editor?

> 
> Thanks,
> 
> 
> 
> 
> --
> Emmanuel
> 
> +---------------------------------------------------------------------------+
> | Emmanuel-Robert Mayssat                               TAOS @ VA Linux     |
> | https://vaweb.valinux.com/~emayssat                   408/542-8759        |
> +---------------------------------------------------------------------------+

   O__  ---- Rafael Skodlar
  c/ /'_ --- Linux Imagineer since 1994
 (*) \(*) -- There is a tunnel at the end of light.





More information about the svlug mailing list