Limited shell for debian

zerocool

5/4/24, 6:52 AM

I'm looking into a limited shell option for Debian. The idea is to have a shell with limited access and commands for specific users. The user would log in to this shell and have limited access(visibility) to folders/binaries.

I've looked into rbash(easy to bypass) and lshell(deprecated). I've also played with chroot jail but it is not the ideal solution.

Does anybody know of another solution?

1 + 1

debian

ssh

shell

Gerald Schneider

5/4/24, 7:45 AM

product recommendations are off topic. Try [unix.se] or [softwarerecs.se].

Score:0

Server

asktyagi

5/4/24, 9:00 AM

From wiki.

The restricted mode of the Bourne shell sh, and its POSIX workalikes, is used when the interpreter is invoked in one of the following ways:

sh -r    note that this conflicts with the "read" option in some sh variants
rsh    note that this may conflict with the remote shell command, which is also called rsh on some systems
The restricted mode of Bash is used when Bash is invoked in one of the following ways:

rbash
bash -r
bash --restricted

Similarly KornShell's restricted mode is produced by invoking it thus:

rksh
ksh -r

You just need to use one of them, install and link with the session. Also note that restricted shell is not secure.

+ 1

zerocool

5/4/24, 11:49 AM

From my original post:"I've looked into rbash(easy to bypass) and lshell(deprecated)."

Elon Musk

I sit in a Tesla and translated this thread with Ai:

EN: Limited shell for debian

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.