From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Jens Knoell" Subject: Restricting shells... Date: Tue, 24 Feb 2004 10:42:50 -0700 Sender: linux-admin-owner@vger.kernel.org Message-ID: <003701c3fafd$9ff50250$6f00000a@jenswin2k> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: List-Id: Content-Type: text/plain; charset="us-ascii" To: Linux Admin This is kinda tricky: Situation: - A webserver, hosting a page which has CGIs enabled - Not-too-bright webdesigner putting up scripts that allow "escaping", by i.e. sending a receipient of someone@somewhere;/bin/bash -i I want to restrict _interactive_ bash shells (other shells are not a concern yet). Is there _any_ way to do that, short of wrapping bash into a little program that checks by whom bash got called and with which parameters? Thanks Jens