Re: how to prevent bang (!) escapes
Posted in 1996
In article <mbehna.321.000D19D7@promus.com>, Michel Behna <mbehna@promus.com> wrote: >>Does anyone know of a way to prevent users >>from using the bang (!) character to do shell >>escapes from Informix tools? > >Just redefine the environment variable SHELL to nothing before going into >whatever program. e.g. >SHELL= Be careful with this approach. Some Unix utilities interpret a missing or null SHELL to mean "use the default" rather than "not allowed." A better approach is probably to set SHELL to /dev/null as previously suggested or to a program that displays a warning message then exits immediately. How well either scheme works will ultimately depend on your particular flavor and version or Unix. Try to stress test whatever approach you choose as thoroughly as possible. Walt. -- Walt Hultgren Internet: walt@rmy.emory.edu (IP 170.140.97.4) Emory University UUCP: {...,gatech,rutgers,uunet}!emory!rmy!walt 954 Gatewood Road, NE BITNET: walt@EMORY Atlanta, GA 30329 USA Voice: +1 404 727 0648