Re: [cobalt-users] restricting shell accts?

[Jeff Lasman <jblists@xxxxxxxxxxxxx>]

Mat Kovach wrote:

> : There are ways to do it, and they ARE documented all over the Internet.
> : I've never tried this, and I have no idea if they interfere with the
> : Cobalt's gui or not, but I presume they wood.

Can't believe that spelling error <smile>.  Of course even had I used a
spell-checker, it wouldn't have caught it.  A Microsoft product would
have; it would have given it a green underscore for a grammar error, but
I wouldn't have noticed it because Microsoft software underscores most
of what I write in green <wry grin>.

> Actually if you get the O'Reaily book on Bash, it talks about the
> restricted bash shell, with MIGHT work the way people on the list
> has descriped, but it still is going to take some reasearch and testing
> to do so.

It'll work.  But it's a lot of work.  And it's not plug and play.

> Offer shell accounts it insane, but with that said I do support them.  They
> take a look of work, was Jeff said, making sure that the permissions are
> set, etc.  Either way, the request of restricted shell accounts is not
> any easy task, although do-able if one is willing to take the time to
> do it.

As you know, Mat, there are some real justifications for shell
accounts.  That said, my interest in offering them is that so few people
do now that I can probably make some money doing it <smile>.

The system will be carefully monitored, I'll use an old trick you
probably know about:  log all messages to a teletype-style printer, so
no one can go in and erase the file <smile>.  And I'll keep it at home,
where I can watch what's going on, and turn it off in seconds if
necessary.

Jeff
-- 
Jeff Lasman <jblists@xxxxxxxxxxxxx>
nobaloney.net
P. O. Box 52672
Riverside, CA  92517
voice: (909) 787-8589  *  fax: (909) 782-0205