RE: How to bypass /etc/passwd's shell

From: Marcus Zoller (Marcus.Zoller_at_idnt.net)
Date: 07/19/01

On Thu, 19 Jul 2001, Jose Nazario wrote:
>
> not wise. one can ^C out of the script's execution, leaving you with
> /bin/sh as your shell. (been there, tried that, was able to break out,
> it's easier than you may guess.)
>

hmmm... I was unable to do this becaus interrupting with ^C terminates
the script and if this is your login shell there are no more processed remainig,
so you will get logged out ???

/bin/sh is the only thing executed in the real root and interrupting this
will not leave an process remaining!?

Marcus

Relevant Pages

  • Re: Securely allowing just one application via telnet
    ... > stuff before handing execution to this application. ... > and you can not trust your user (he's using telnet, ... > that will be executed as the user's login shell. ... Also keep in mind that starting an SSH tunnel can allow you to do many ...
    (freebsd-questions)
  • Re: ACL problems, any suggestions would be great
    ... As for restricting to execution of a single command, ... > I could not come up with a solution to solve this problem with openssh. ... > because you could specify a login shell for all users that would override the login shell ...
    (SSH)