changes to new pattern substitution replacement; documentation updates

This commit is contained in:
Chet Ramey
2021-10-18 10:57:20 -04:00
parent 304b1e938c
commit 1fff64acdc
18 changed files with 2528 additions and 2270 deletions
+4 -4
View File
@@ -40,10 +40,10 @@ spawned to execute the script.
The restricted shell mode is only one component of a useful restricted
environment. It should be accompanied by setting 'PATH' to a value that
allows execution of only a few verified commands (commands that allow
shell escapes are particularly vulnerable), leaving the user in a
non-writable directory other than his home directory after login, not
allowing the restricted shell to execute shell scripts, and cleaning the
environment of variables that cause some commands to modify their
shell escapes are particularly vulnerable), changing the current
directory to a non-writable directory other than '$HOME' after login,
not allowing the restricted shell to execute shell scripts, and cleaning
the environment of variables that cause some commands to modify their
behavior (e.g., 'VISUAL' or 'PAGER').
Modern systems provide more secure ways to implement a restricted