Re: [Hugh Grierson: Re: HELP : preventing users from escaping to shell (!sh)]

[Anbarnes@letterkenn-emh1.army.mil wrote] [Good stuff about shell escapes and security deleted] > We also need a solution to this problem, but do not use 4gl, simply > sperforming forms. The users can get out of the forms or the isql menus > with !. We also cannot set SHELL to "" because many of the menus run > shell commands. Is there another solution? We are running 4.0 version, > so nothing from the newer versions please. someday, maybe.....(dream...) > Ann Ann, A possible solution is to rewrite the shell. No, I am not kidding. You could create a smallish program that has a series of system calls that allow users to run a subset of commands, but disallow others... Or maybe just run one command and then exit (kind of like sudo). I have written my own shell to do something similar. If you would like a copy, I'd be glad to sell it to you for a nominal charge. ;-) Just kidding, you can have it for nothing. email me if you want a copy. DISCLAIMER: I wrote it on a bet with another programmer. It is not fancy. In fact, it's pretty brain-dead. But it may be a good starting point. -- +------------------------------------------------------------------------+ | Bob Payne, Systems Engineer Internet: bobp@dev.dsc.dalsys.com | | Dallas Systems Corporation Personal: bpayne@netcom.com | | 12740 Hillcrest Road Voice: (214) 383-2238 | | Dallas, TX 75043 Fax: (214) 788-4208 | | World Wide Web: ftp://ftp.netcom.com/pub/bp/bpayne/bpayne.html | +------------------------------------------------------------------------+