[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Minimizing shell access on my VPS



Reco <recoverym4n@gmail.com> wrote:
> Set up another user with /bin/rbash (not straight /bin/bash) as a shell.
> Set PATH in .bashrc of said user to that program.

Unfortunately rbash has a race condition built in to its execution of
.profile by definition (it doesn't disable the interrupt signal until
after the .profile has been executed, so it becomes quite possible to
Ctrl/C during login and gain an interactive shell). You'd be better off
with rksh, which works properly.

But then again, .profile can be bypassed by a non-interactive login:

	ssh remotehost mv -f .profile .p
	ssh remotehost

Chris


Reply to: