Mikkel <mikkel@xxxxxxxxxxxxxxxx> writes:
> You may also want to consider setting his shell to rbash. See the
> "RESTRICTED SHELL" section of the bash man page.
Treat rbash as a fun puzzle, not as a security measure. They did block
">" redirects and ./doit file execution, but that is far from enough.
With a few minutes pondering this solution popped up.
emacs doit
<insert "bash -i" without the quotes>
. doit
<instant non-restricted shell>
-wolfgang
--
Wolfgang S. Rupprecht http://www.wsrcc.com/wolfgang/ (IPv6-only)
--
users mailing list
users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
