smrsh — Restricted Shell for sendmail
Synopsis
/usr/lib/smrsh -c command
Description
The smrsh command is new in the Solaris 8 release. It is a replacement for the sh command in the prog mailer in sendmail(1M) configuration files. The smrsh command sharply limits commands that can be run using the |program syntax of sendmail. This restriction improves overall system security. smrsh limits the set of programs that a programmer can execute, even if sendmail runs a program without going through an alias or .forward file.
Briefly, smrsh limits programs to be in the directory /var/adm/sm.bin, enabling system administrators to choose the set of acceptable ...
Get Solaris™ 8 System Administrator's Reference now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
