diff options
Diffstat (limited to 'smrsh/smrsh.0')
| -rw-r--r-- | smrsh/smrsh.0 | 36 |
1 files changed, 18 insertions, 18 deletions
diff --git a/smrsh/smrsh.0 b/smrsh/smrsh.0 index 40ac9bc55297..ca30a62ae516 100644 --- a/smrsh/smrsh.0 +++ b/smrsh/smrsh.0 @@ -2,22 +2,22 @@ SMRSH(8) SMRSH(8) -NNAAMMEE +[1mNAME[0m smrsh - restricted shell for sendmail -SSYYNNOOPPSSIISS - ssmmrrsshh --cc command +[1mSYNOPSIS[0m + [1msmrsh -c [22mcommand -DDEESSCCRRIIPPTTIIOONN - The _s_m_r_s_h program is intended as a replacement for _s_h for use in the - ``prog'' mailer in _s_e_n_d_m_a_i_l(8) configuration files. It sharply limits - the commands that can be run using the ``|program'' syntax of _s_e_n_d_m_a_i_l +[1mDESCRIPTION[0m + The [4msmrsh[24m program is intended as a replacement for [4msh[24m for use in the + ``prog'' mailer in [4msendmail[24m(8) configuration files. It sharply limits + the commands that can be run using the ``|program'' syntax of [4msendmail[0m in order to improve the over all security of your system. Briefly, even if a ``bad guy'' can get sendmail to run a program without going - through an alias or forward file, _s_m_r_s_h limits the set of programs that + through an alias or forward file, [4msmrsh[24m limits the set of programs that he or she can execute. - Briefly, _s_m_r_s_h limits programs to be in a single directory, by default + Briefly, [4msmrsh[24m limits programs to be in a single directory, by default /usr/adm/sm.bin, allowing the system administrator to choose the set of acceptable commands, and to the shell builtin commands ``exec'', ``exit'', and ``echo''. It also rejects any commands with the charac- @@ -32,22 +32,22 @@ DDEESSCCRRIIPPTTIIOONN ward to ``/usr/adm/sm.bin/vacation''. System administrators should be conservative about populating the - sm.bin directory. For example, a reasonable additions is _v_a_c_a_t_i_o_n(1), + sm.bin directory. For example, a reasonable additions is [4mvacation[24m(1), and the like. No matter how brow-beaten you may be, never include any - shell or shell-like program (such as _p_e_r_l(1)) in the sm.bin directory. + shell or shell-like program (such as [4mperl[24m(1)) in the sm.bin directory. Note that this does not restrict the use of shell or perl scripts in the sm.bin directory (using the ``#!'' syntax); it simply disallows execution of arbitrary programs. Also, including mail filtering pro- - grams such as _p_r_o_c_m_a_i_l(1) is a very bad idea. _p_r_o_c_m_a_i_l(1) allows users - to run arbitrary programs in their _p_r_o_c_m_a_i_l_r_c(5). + grams such as [4mprocmail[24m(1) is a very bad idea. [4mprocmail[24m(1) allows users + to run arbitrary programs in their [4mprocmailrc[24m(5). -CCOOMMPPIILLAATTIIOONN +[1mCOMPILATION[0m Compilation should be trivial on most systems. You may need to use - -DSMRSH_PATH=\"_p_a_t_h\" to adjust the default search path (defaults to - ``/bin:/usr/bin:/usr/ucb'') and/or -DSMRSH_CMDDIR=\"_d_i_r\" to change the + -DSMRSH_PATH=\"[4mpath[24m\" to adjust the default search path (defaults to + ``/bin:/usr/bin:/usr/ucb'') and/or -DSMRSH_CMDDIR=\"[4mdir[24m\" to change the default program directory (defaults to ``/usr/adm/sm.bin''). -FFIILLEESS +[1mFILES[0m /usr/adm/sm.bin - default directory for restricted programs on most OSs /var/adm/sm.bin - directory for restricted programs on HP UX and @@ -57,7 +57,7 @@ FFIILLEESS 3.3) and DragonFly BSD -SSEEEE AALLSSOO +[1mSEE ALSO[0m sendmail(8) |
