aboutsummaryrefslogtreecommitdiff
path: root/smrsh/smrsh.0
diff options
context:
space:
mode:
Diffstat (limited to 'smrsh/smrsh.0')
-rw-r--r--smrsh/smrsh.036
1 files changed, 18 insertions, 18 deletions
diff --git a/smrsh/smrsh.0 b/smrsh/smrsh.0
index 40ac9bc55297..ca30a62ae516 100644
--- a/smrsh/smrsh.0
+++ b/smrsh/smrsh.0
@@ -2,22 +2,22 @@ SMRSH(8) SMRSH(8)
-NNAAMMEE
+NAME
smrsh - restricted shell for sendmail
-SSYYNNOOPPSSIISS
- ssmmrrsshh --cc command
+SYNOPSIS
+ smrsh -c command
-DDEESSCCRRIIPPTTIIOONN
- The _s_m_r_s_h program is intended as a replacement for _s_h for use in the
- ``prog'' mailer in _s_e_n_d_m_a_i_l(8) configuration files. It sharply limits
- the commands that can be run using the ``|program'' syntax of _s_e_n_d_m_a_i_l
+DESCRIPTION
+ The smrsh program is intended as a replacement for sh for use in the
+ ``prog'' mailer in sendmail(8) configuration files. It sharply limits
+ the commands that can be run using the ``|program'' syntax of sendmail
in order to improve the over all security of your system. Briefly,
even if a ``bad guy'' can get sendmail to run a program without going
- through an alias or forward file, _s_m_r_s_h limits the set of programs that
+ through an alias or forward file, smrsh limits the set of programs that
he or she can execute.
- Briefly, _s_m_r_s_h limits programs to be in a single directory, by default
+ Briefly, smrsh limits programs to be in a single directory, by default
/usr/adm/sm.bin, allowing the system administrator to choose the set of
acceptable commands, and to the shell builtin commands ``exec'',
``exit'', and ``echo''. It also rejects any commands with the charac-
@@ -32,22 +32,22 @@ DDEESSCCRRIIPPTTIIOONN
ward to ``/usr/adm/sm.bin/vacation''.
System administrators should be conservative about populating the
- sm.bin directory. For example, a reasonable additions is _v_a_c_a_t_i_o_n(1),
+ sm.bin directory. For example, a reasonable additions is vacation(1),
and the like. No matter how brow-beaten you may be, never include any
- shell or shell-like program (such as _p_e_r_l(1)) in the sm.bin directory.
+ shell or shell-like program (such as perl(1)) in the sm.bin directory.
Note that this does not restrict the use of shell or perl scripts in
the sm.bin directory (using the ``#!'' syntax); it simply disallows
execution of arbitrary programs. Also, including mail filtering pro-
- grams such as _p_r_o_c_m_a_i_l(1) is a very bad idea. _p_r_o_c_m_a_i_l(1) allows users
- to run arbitrary programs in their _p_r_o_c_m_a_i_l_r_c(5).
+ grams such as procmail(1) is a very bad idea. procmail(1) allows users
+ to run arbitrary programs in their procmailrc(5).
-CCOOMMPPIILLAATTIIOONN
+COMPILATION
Compilation should be trivial on most systems. You may need to use
- -DSMRSH_PATH=\"_p_a_t_h\" to adjust the default search path (defaults to
- ``/bin:/usr/bin:/usr/ucb'') and/or -DSMRSH_CMDDIR=\"_d_i_r\" to change the
+ -DSMRSH_PATH=\"path\" to adjust the default search path (defaults to
+ ``/bin:/usr/bin:/usr/ucb'') and/or -DSMRSH_CMDDIR=\"dir\" to change the
default program directory (defaults to ``/usr/adm/sm.bin'').
-FFIILLEESS
+FILES
/usr/adm/sm.bin - default directory for restricted programs on most OSs
/var/adm/sm.bin - directory for restricted programs on HP UX and
@@ -57,7 +57,7 @@ FFIILLEESS
3.3) and DragonFly BSD
-SSEEEE AALLSSOO
+SEE ALSO
sendmail(8)