Iron Bars SHell is a restricted Unix shell. The user can not step out of, nor access, files outside the home directory. Two ASCII configuration files are used for more control. The system administrator can define which commands may be executed by the user. No other executables are allowed. The admin also has the opportunity to define what kind of files the user may create. If a file has a certain extension (such as .mp3, .c, etc.), ibsh automatically erases it.
|Operating Systems||POSIX BSD Linux|
Release Notes: A buffer overflow and 2 string bugs were fixed.
Release Notes: A format string vulnerability in a syslog call was fixed. This vulnerability could have allowed users to access files outside the home directory.
Release Notes: Two segfaults, caused by non-US characters and empty files, were fixed. Ctrl-Z is now ignored, and sample XTNL config files were added for help.
Release Notes: Major bugfixes in the Makefile and the code. The messages about removing rights on illegal files are removed.
Release Notes: In this release, the admin has the opportunity to create a separate cmds file for each user. This way the sysadmin has complete control over sensitive applications, which should only be allowed to a selected few. The admin also has the opportunity to create a separate xtns file for each user. The extensions policy has been changed. Now both globals.xtns and the user extension files will list the extensions that are _allowed_ ! While the code for the search of illegal/ dangerous material stored in user space is back, it will not erase any files any more. Instead, it will remove all rights from that file, so it can not be executed, or read. This is another "defense line" to stop the user to execute programs, stored in user space. The access to all Linux binaries and source code files stored in user space is now be blocked. Absolute path for restricted users cannot be longer then 255 characters. All files that are longer (with full path), will be renamed. There are also minor bugfixes.