Escaped Felons On the Loose ... Well, Not Exactly ...
Posted in 2004
Topics: General Discussion
I am working for a client that has people using !sh or !ksh to temporarily exit an isql menuitems menu. Management would like me to turn sheriff and turn off this "feature". I seem to remember an environment parameter or some other UNIX item that could be used to prevent these escapes. Anybody remember how? Thanks in advance. Clifton
"Clifton M. Bean" <cmbean@sbcglobal.net> wrote on 08/04/2004 12:52:47 PM: > I am working for a client that has people using !sh or !ksh to > temporarily exit an isql menuitems menu. Management would like me > to turn sheriff and turn off this "feature". > > I seem to remember an environment parameter or some other UNIX item > that could be used to prevent these escapes. > > Anybody remember how? The simple-minded solution is to set SHELL=/bin/false in the environment. This is not, however, very good -- it's a bit too radical. A slightly more complex solution was published in 'Using Informix-SQL' by Yours Truly - you should really get your copy out and read up on it (Appendix C, p308 in 2nd Edn "Restricted shell for use with INFORMIX-SQL"). Off-hand, I'd expect the code (isqlsh.c) to be available on the IIUG web site in the software archive. If not, tell me. -- Jonathan Leffler (jleffler@us.ibm.com) STSM, Informix Database Engineering, IBM Data Management 4100 Bohannon Drive, Menlo Park, CA 94025 Tel: +1 650-926-6921 Tie-Line: 630-6921 "I don't suffer from insanity; I enjoy every minute of it!"
WE use
this
SHELL=""
in the script we have written . we use a menu that takes user directly to
dbaccess .