Set the user to use something like //bin/rsh or /bin/rksh (restricted
bourne or restricted korn) shell. Then, you have to put in the
applications that they can use. They can't cd, and they can't directly
drop into another shell. I use the rksh. You will have to make sure
that in the programs that they can't press ! and get a shell prompt of
their choice. This can be a pain if you have a lot of programs that can
do that. I also created a new group that doesn't own anything anywhere
on the system, so they can't get access at group level.
Jonathan Brown
On Fri, 18 Oct 1996, Jeffrey Aizley wrote:
> does anyone have a pre-written menu that I can compile
> under solaris which will allow shell users to do only the *basic*
> stuff but not actually allow them to access the shell prompt?
>
> (by the basic stuff I mean elm,telnet,ftp,lynx,gopher,tin)..
>
> getting sick of hackers..
>
> -jha@gis.net
>
>