Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm running a Linux system that starts a custom text mode application from the .bashrc. The users are getting disconnected due to network dropouts.

I had the idea that I'd use screen to allow them to get back to the prior session, but I like to make sure that they can't open a subshell that allows access to the UNIX command line (or for that matter, another login).

I've modified .screenrc with the following: bind c bind ^c

To prevent the Control-A Control-C command from working. Are are any other security issues that I need to be a where of here?

share|improve this question

2 Answers 2

up vote 3 down vote accepted

You'll have to prevent users from doing C-a : shell as well, and probably many other commands. Look into screen acl commands. Start with aclchg $USER -x ? and enable the commands you see fit.

share|improve this answer

I can't help with the screen part but wanted to ask if you have made sure users are not able to suspend your application (for example by pressing Control-Z) and getting shell access this way?

just my 2¢ Marcel

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.