Subject: Running pine/pico in restricted shell

From: [email-masked] (R. Stewart Ellis)
Date: 15 Apr 95 02:30:11 GMT

I am helping someone setup a menued system on a Solaris 2.3 machine, using
rsh to keep the users from getting too carried away.  We have all sorts of
things working, but have hit the wall with spellchecking in pine and pico. 
Even though I recompiled pico with the SPELLER variable set to spell rather
than /usr/bin/spell, when P_open() calls sysstem() the path is being
prepended, and /usr/local/rbin/rsh pukes because of the /'s.  Before I
reimplement some of this to avoid having path prepended, has anyone done
something similar?  Or got any better ideas?

Thank you.

Stew

-- 
  R.Stewart(Stew) Ellis, Assoc.Prof., (Off)810-762-9765   ___________________
  Humanities & Social Science,  GMI Eng.& Mgmt. Inst.    /   _____  ______ 
  Flint, MI 48504      [email-masked]               /        / /  /  / /
  Gopher,chimera,nn,tin,jove,modems, free code is best!/________/ /  /  / /

---

From: "J. Lynn Hilton" <[email-masked]>
Date: Mon, 17 Apr 1995 09:04:07 -0400 (EDT)

Seems to me that an easier solution would be to put a copy of 
/usr/bin/spell in /usr/local/rbin...

Lynn
[email-masked] or
[email-masked]

+---------------------------------------------------------------------+
| J. Lynn Hilton                     |  Home where the AViiONs roam   |
| Concept Automation Services, Inc.  |                                |
| AOUSC, One Columbus Circle, N.E.   |  Voice: 202-273-2413           |
| Washington, DC  20544              |  FAX:   202-273-2356           |
+---------------------------------------------------------------------+

---

From: "R. Stewart Ellis" <[email-masked]>
Date: Mon, 17 Apr 1995 09:54:32 -0400 (EDT)

On Mon, 17 Apr 1995, J. Lynn Hilton wrote:

> Date: Mon, 17 Apr 1995 09:04:07 -0400 (EDT)
> From: J. Lynn Hilton <[email-masked]>
> To: "R. Stewart Ellis" <[email-masked]>
> Cc: [email-masked]
> Subject: Re: Running pine/pico in restricted shell
> 

You either did not read the message contained below or you did not
understand all the issues.  spell has been put in /usr/local/rbin, pico and
pine are in rbin, the spell script has been changed to get rid of references
to other directories, sed, deroff, etc.  have all been put in the rbin dir.
The rsh users have PATH=/usr/local/rbin exported in their environment so
that they can find all the apps they are allowed to run.  /usr/lib/rsh also
has been copied to /usr/local/rbin.  The problem is that pine uses a
system() call which prepends path to a command that is specified without
one, and rsh rightly refuses to execute any command with /'s in it.

What I am really looking for is someone who has rewritten the P_open()
function in pico.

> [email-masked]
[...]