On Thu, Jan 12, 2012 at 12:51 PM, Sarnath K - ERS, HCLTech <k_sarn...@hcl.com> wrote: > Oops.. It actually works! That's a great catch! > > I thought "redirection" is not supported in restricted mode though..! > I just checked... It is mostly related to "output" re-direction. > > Hmm......I think I am going to tinker "bash" source code to disable the > "echo" builtin. :-) > > Any ideas? > I don 't think it's a good idea, there are many many many tricks like this ( printf, read, mapfile....), or for instance just run: "$(<file)" and you will get the file as an error message.
As hinted at the beginning securing a shell like you want should probably be discussed elsewhere, maybe on a debian list.
