diff options
| author | Joe Rayhawk <jrayhawk@cobain.omgwallhack.org> | 2018-09-23 00:19:02 -0700 |
|---|---|---|
| committer | Joe Rayhawk <jrayhawk@cobain.omgwallhack.org> | 2018-09-23 00:19:02 -0700 |
| commit | 8f2a63b936ddf781c5b591d76108b11579485f39 (patch) | |
| tree | 1773ca6e0ccc2b82af67f5579a01a0af735a4510 /pinyadmin/bin/pinyshell | |
| parent | 77c04fb8f4eb0f061ac1d652f081f0a038e1803e (diff) | |
| download | piny-code-8f2a63b936ddf781c5b591d76108b11579485f39.tar.gz piny-code-8f2a63b936ddf781c5b591d76108b11579485f39.zip | |
pinyshell: use zsh and restrict read builtin
Along with rbash careening towards crazytown, rksh has some problematic
behavior around HISTFILE creation that forces us to use zsh. We are
additionally disabling the "read" builtin for extra safety. Other
builtins should maybe also be disabled in the future.
Diffstat (limited to 'pinyadmin/bin/pinyshell')
| -rwxr-xr-x | pinyadmin/bin/pinyshell | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/pinyadmin/bin/pinyshell b/pinyadmin/bin/pinyshell index 2cfc3cf..9a63b14 100755 --- a/pinyadmin/bin/pinyshell +++ b/pinyadmin/bin/pinyshell @@ -3,4 +3,6 @@ cd /srv/rbin umask 0022 export PATH=/srv/rbin -exec /bin/ksh -r "$@" + +export ZDOTDIR=/usr/share/piny/zdotdir +exec /bin/zsh-static -r "$@" |