[PATCH] prevent users from changing their environment

Tony Finch dot at dotat.at
Fri Jul 26 11:31:09 EST 2002


On Thu, Jul 25, 2002 at 02:16:10PM -0500, Ben Lindstrom wrote:
> 
> Why are you using a restricted shell that is not staticly compiled?

The ABI for Solaris is dynamic only. Only binaries in /sbin are statically
linked, and only Sun compile them, and they are not used as login shells.

$ uname -a
SunOS prism.csi.cam.ac.uk 5.6 Generic_105181-31 sun4u sparc SUNW,Ultra-1
$ ldd /bin/sh
        libc.so.1 =>     /usr/lib/libc.so.1
        libdl.so.1 =>    /usr/lib/libdl.so.1
        /usr/platform/SUNW,Ultra-1/lib/libc_psr.so.1
$ ldd /usr/bin/ksh
        libsocket.so.1 =>        /usr/lib/libsocket.so.1
        libnsl.so.1 =>   /usr/lib/libnsl.so.1
        libc.so.1 =>     /usr/lib/libc.so.1
        libdl.so.1 =>    /usr/lib/libdl.so.1
        libmp.so.2 =>    /usr/lib/libmp.so.2
        /usr/platform/SUNW,Ultra-1/lib/libc_psr.so.1

In my case the shell is a menu system rather than a shell.

Tony.
-- 
f.a.n.finch <dot at dotat.at> http://dotat.at/
NORTH FITZROY SOLE: WEST OR SOUTHWEST 3 OR 4. DRIZZLE. MODERATE OR POOR.



More information about the openssh-unix-dev mailing list