diff options
Diffstat (limited to 'contrib/sendmail/smrsh/smrsh.8')
-rw-r--r-- | contrib/sendmail/smrsh/smrsh.8 | 98 |
1 files changed, 0 insertions, 98 deletions
diff --git a/contrib/sendmail/smrsh/smrsh.8 b/contrib/sendmail/smrsh/smrsh.8 deleted file mode 100644 index b84c9e2ec23c0..0000000000000 --- a/contrib/sendmail/smrsh/smrsh.8 +++ /dev/null @@ -1,98 +0,0 @@ -.\" Copyright (c) 1998-2004 Sendmail, Inc. and its suppliers. -.\" All rights reserved. -.\" Copyright (c) 1993 Eric P. Allman. All rights reserved. -.\" Copyright (c) 1993 -.\" The Regents of the University of California. All rights reserved. -.\" -.\" By using this file, you agree to the terms and conditions set -.\" forth in the LICENSE file which can be found at the top level of -.\" the sendmail distribution. -.\" -.\" -.\" $Id: smrsh.8,v 8.22 2004/08/06 03:55:35 gshapiro Exp $ -.\" -.TH SMRSH 8 "$Date: 2004/08/06 03:55:35 $" -.SH NAME -smrsh \- restricted shell for sendmail -.SH SYNOPSIS -.B smrsh -.B \-c -command -.SH DESCRIPTION -The -.I smrsh -program is intended as a replacement for -.I sh -for use in the ``prog'' mailer in -.IR sendmail (8) -configuration files. -It sharply limits the commands that can be run using the -``|program'' syntax of -.I sendmail -in order to improve the over all security of your system. -Briefly, even if a ``bad guy'' can get sendmail to run a program -without going through an alias or forward file, -.I smrsh -limits the set of programs that he or she can execute. -.PP -Briefly, -.I smrsh -limits programs to be in a single directory, -by default -/usr/adm/sm.bin, -allowing the system administrator to choose the set of acceptable commands, -and to the shell builtin commands ``exec'', ``exit'', and ``echo''. -It also rejects any commands with the characters -`\`', `<', `>', `;', `$', `(', `)', `\er' (carriage return), -or `\en' (newline) -on the command line to prevent ``end run'' attacks. -It allows ``||'' and ``&&'' to enable commands like: -``"|exec /usr/local/bin/filter || exit 75"'' -.PP -Initial pathnames on programs are stripped, -so forwarding to ``/usr/ucb/vacation'', -``/usr/bin/vacation'', -``/home/server/mydir/bin/vacation'', -and -``vacation'' -all actually forward to -``/usr/adm/sm.bin/vacation''. -.PP -System administrators should be conservative about populating -the sm.bin directory. -For example, a reasonable additions is -.IR vacation (1), -and the like. -No matter how brow-beaten you may be, -never include any shell or shell-like program -(such as -.IR perl (1)) -in the -sm.bin -directory. -Note that this does not restrict the use of shell or perl scripts -in the sm.bin directory (using the ``#!'' syntax); -it simply disallows execution of arbitrary programs. -Also, including mail filtering programs such as -.IR procmail (1) -is a very bad idea. -.IR procmail (1) -allows users to run arbitrary programs in their -.IR procmailrc (5). -.SH COMPILATION -Compilation should be trivial on most systems. -You may need to use \-DSMRSH_PATH=\e"\fIpath\fP\e" -to adjust the default search path -(defaults to ``/bin:/usr/bin:/usr/ucb'') -and/or \-DSMRSH_CMDDIR=\e"\fIdir\fP\e" -to change the default program directory -(defaults to ``/usr/adm/sm.bin''). -.SH FILES -/usr/adm/sm.bin \- default directory for restricted programs on most OSs -.PP -/var/adm/sm.bin \- directory for restricted programs on HP UX and Solaris -.PP -/usr/libexec/sm.bin \- directory for restricted programs on FreeBSD (>= 3.3) and DragonFly BSD - -.SH SEE ALSO -sendmail(8) |