Zsh Mailing List Archive Messages sorted by: Reverse Date, Date, Thread, Author

Restricted Mode Vuln

X-seq: zsh-workers 38691
From: "Duncan X. Simpson" <virtualdxs@xxxxxxxxx>
To: zsh-workers@xxxxxxx
Subject: Restricted Mode Vuln
Date: Thu, 16 Jun 2016 03:37:26 +0000
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:from:date:message-id:subject:to; bh=2KD/ZRoFMXX1w/wfphcXugk2QYdzfa8nBJEoocyZUzo=; b=QOrXQNwhbxheQtrQBULMZo333aHCcF/TgQCuLVsR88r6+hMLAUSJAvUux+K3S59fQv KhvoxYhq99CUYXyQYtJ5xZ2wqDp/CtPZGiolVotcp6pBCYw+Fvtqc6zD83pTQbd3AoYQ FNAbSB6YkHe3vGMVeiHCsyBP2gTMM1ighADMq4IkvmHrjbpD9Ei2Bs0VLKYwA0IGVuuj az8FlcBs55yZdM1NgkoDfmbg3LfY7QzqxdN8BAdDTM6vgs5TYJtUdr4E5vzsgBq/qirD uNf7LSgx2v5tmp57XhQBjCQq8hImeJx0mZQK4zj0WqycnnlGRrlOaS9yt71UICYl9gSC 9h1A==
List-help: <mailto:zsh-workers-help@zsh.org>
List-id: Zsh Workers List <zsh-workers.zsh.org>
List-post: <mailto:zsh-workers@zsh.org>
Mailing-list: contact zsh-workers-help@xxxxxxx; run by ezmlm

Restricted Mode should prevent the user from changing $IFS. One example of
an exploit:
http://linuxshellaccount.blogspot.com/2008/05/restricted-accounts-and-vim-tricks-in.html

Love this shell BTW
-- 

Duncan X. Simpson, K7DXS

Follow-Ups:
- Re: Restricted Mode Vuln
  - From: Peter Stephenson

Messages sorted by: Reverse Date, Date, Thread, Author