Man page or keyword search:   man All Sections 1 - General Commands 2 - System Calls 3 - Subroutines, Functions 4 - Special Files 5 - File Formats 6 - Games and Screensavers 7 - Macros and Conventions 8 - Maintenence Commands 9 - Kernel Interface New Commands Server 4.4BSD AIX Alpinelinux Archlinux Aros BSDOS BSDi Bifrost CentOS Cygwin Darwin Debian DigitalUNIX DragonFly ElementaryOS Fedora FreeBSD Gentoo GhostBSD HP-UX Haiku Hurd IRIX Inferno JazzOS Kali Knoppix LinuxMint MacOSX Mageia Mandriva Manjaro Minix MirBSD NeXTSTEP NetBSD OPENSTEP OSF1 OpenBSD OpenDarwin OpenIndiana OpenMandriva OpenServer OpenSuSE OpenVMS Oracle PC-BSD Peanut Pidora Plan9 QNX Raspbian RedHat Scientific Slackware SmartOS Solaris SuSE SunOS Syllable Tru64 UNIXv7 Ubuntu Ultrix UnixWare Xenix YellowDog aLinux   10987 pages apropos Keyword Search (all sections) Output format html ascii pdf view pdf save postscript

smrsh(1M)							     smrsh(1M)

NAME
       smrsh - restricted shell for sendmail

SYNOPSIS
       command

DESCRIPTION
       The  program  is intended as a replacement for for use in the mailer in
       configuration files.  It sharply limits the commands that  can  be  run
       using  the  syntax  of in order to improve the overall security of your
       system.	Briefly, even if a ``bad guy'' can get to run a program	 with‐
       out  going through an alias or forward file, limits the set of programs
       that he or she can execute.

       Briefly, limits programs to be in the  directory	 allowing  the	system
       administrator  to  choose  the  set  of	acceptable  commands.  It also
       rejects any commands with the characters (carriage return),  and	 (new‐
       line) on the command line to prevent ``end run'' attacks.

       Initial	pathnames  on  programs are stripped, so forwarding to and all
       actually forward to

       System administrators should be conservative about  populating  Reason‐
       able  additions	are and Do not include any shell or shell-like program
       (such as in the directory.  Note that this does not restrict the use of
       shell  or  perl	scripts in the directory (using the syntax); it simply
       disallows execution of arbitrary programs.

FILES
       Directory for restricted programs

SEE ALSO
       sendmail(1M).

								     smrsh(1M)

Vote for polarhome