Article View: comp.unix.admin
Article #4460Re: A mail client as a unix shell? How to make it safe? Is there a free web mail solution?
From: MetaBork
Date: Thu, 02 Apr 1998 00:00
Date: Thu, 02 Apr 1998 00:00
23 lines
1747 bytes
1747 bytes
On 30 Mar 1998 15:22:35 -0500, float@interport.net <float@interport.net> wrote:
>Roy Stogner (roystgnrNO@SPAMiname.com) wrote:
>
>: echo "/usr/bin/pine" | chsh roystgnr
>: worked fine on my computer. You log in, and pine starts; you exit
>: pine, and it logs you out.
>
>You do realize that it is trivial to escape to a shell from here,
>right? All one has to do is set the "alternate editor" to their shell
>of choice, and then invoke the alternate editor.
>
>I believe that with the right compile-time flags and entries in the
>systemwide pine.conf, that hole can be closed, though.
There are probably several dozen other ways to get a shell in Pine,
one way or another. I really don't want to trust it. Hence the chroot seems
to be a good solution.
--
----------------------+
nico@MetaBork.ML.ORG |
Paris, FRANCE +---------------------------------------
Technical Details
Message-ID:
<slrn6i6qrv.r4i.nico@idnet-local.fr>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailReferences:
<slrn6hn3h9.onk.nico@idnet-local.fr> <slrn6hohno.149.roystgnrNO@roystgnr.jones.rice.edu> <6fouub$k3h$1@interport.net>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: faff9,59b429fdb683fe49 X-Google-Attributes: gidfaff9,public X-Google-Thread: 1020c6,59b429fdb683fe49 X-Google-Attributes: gid1020c6,public X-Google-Thread: f9b51,59b429fdb683fe49 X-Google-Attributes: gidf9b51,public X-Google-Thread: 109892,59b429fdb683fe49 X-Google-Attributes: gid109892,public From: nico@metabork.ml.org (MetaBork) Subject: Re: A mail client as a unix shell? How to make it safe? Is there a free web mail solution? Date: 1998/04/02 Message-ID: <slrn6i6qrv.r4i.nico@idnet-local.fr> X-Deja-AN: 340432387 References: <slrn6hn3h9.onk.nico@idnet-local.fr> <slrn6hohno.149.roystgnrNO@roystgnr.jones.rice.edu> <6fouub$k3h$1@interport.net> Organization: MetaBork Data Systems, Inc. Newsgroups: comp.unix.admin,comp.os.linux.setup,comp.mail.imap,linux.admin.isp