pmodules/bash
0
0
Fork 0
mirror of https://https.git.savannah.gnu.org/git/bash.git synced 2026-07-16 08:30:49 +02:00
Code Issues Packages Projects Releases Wiki Activity

commit bash-20190430 snapshot

Browse Source
This commit is contained in:
Chet Ramey
2019-05-13 10:04:20 -04:00
parent 42a9b8a197
commit 729acaff19
10 changed files with 80 additions and 23 deletions
Download Patch File Download Diff File Expand all files Collapse all files
doc/bashref.texi
+13
View File
@@ -7548,6 +7548,19 @@ When a command that is found to be a shell script is executed
(@pxref{Shell Scripts}), @code{rbash} turns off any restrictions in
the shell spawned to execute the script.
The restricted shell mode is only one component of a useful restricted
environment. It should be accompanied by setting @env{PATH} to a value
that allows execution of only a few verified commands (commands that
allow shell escapes are particularly vulnerable), leaving the user
in a non-writable directory other than his home directory after login,
not allowing the restricted shell to execute shell scripts, and cleaning
the environment of variables that cause some commands to modify their
behavior (e.g., @env{VISUAL} or @{PAGER}).
Modern systems provide more secure ways to implement a restricted environment,
such as @code{jails}, @code{zones}, or @code{containers}.
@node Bash POSIX Mode
@section Bash POSIX Mode
@cindex POSIX Mode