Re: A mail client as a unix shell? How to make it safe? Is there a free web mail solution?

Article View: comp.unix.admin

Article #4458

#4458

From: float
Date: Mon, 30 Mar 1998 00:00

18 lines
1442 bytes

Roy Stogner (roystgnrNO@SPAMiname.com) wrote:

: echo "/usr/bin/pine" | chsh roystgnr
: worked fine on my computer.  You log in, and pine starts; you exit
: pine, and it logs you out.

You do realize that it is trivial to escape to a shell from here,
right?  All one has to do is set the "alternate editor" to their shell
of choice, and then invoke the alternate editor.

I believe that with the right compile-time flags and entries in the
systemwide pine.conf, that hole can be closed, though.
-- 

 Ben

<Just Another System Administrator>

Technical Details

Message-ID: <6fouub$k3h$1@interport.net>

Path: arc1-ca.pugleaf.net!unknown!not-for-mail

References: <slrn6hn3h9.onk.nico@idnet-local.fr> <slrn6hohno.149.roystgnrNO@roystgnr.jones.rice.edu>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f9b51,59b429fdb683fe49
X-Google-Attributes: gidf9b51,public
X-Google-Thread: 1020c6,59b429fdb683fe49
X-Google-Attributes: gid1020c6,public
X-Google-Thread: faff9,59b429fdb683fe49
X-Google-Attributes: gidfaff9,public
X-Google-Thread: 109892,59b429fdb683fe49
X-Google-Attributes: gid109892,public
From: float@interport.net
Subject: Re: A mail client as a unix shell? How to make it safe? Is there a free web mail solution?
Date: 1998/03/30
Message-ID: <6fouub$k3h$1@interport.net>
X-Deja-AN: 339229560
References: <slrn6hn3h9.onk.nico@idnet-local.fr> <slrn6hohno.149.roystgnrNO@roystgnr.jones.rice.edu>
Followup-To: comp.unix.admin,comp.os.linux.setup,comp.mail.imap,linux.admin.isp
Organization: Interport Communications Corp.
Newsgroups: comp.unix.admin,comp.os.linux.setup,comp.mail.imap,linux.admin.isp

Reply to Parent Message