4 ms·
It should be a way to make system env vars (profile.d or simlar) as readonly so every users' shell had these set to empty values and unable to change them.
by anthk 5mo ago
It should be a way to make system env vars (profile.d or simlar) as readonly so every users' shell had these set to empty values and unable to change them.
- deleted 5mo ago[deleted]
- marshray 5mo agoShell-only, but https://pubs.opengroup.org/onlinepubs/9699919799/utilities/V3_chap02.html#readonly https://pubs.opengroup.org/onlinepubs/9699919799/utilities/V...
- anthk 5mo agoYes; I'm aware, but for some environments writting a custom shell as the one for SDF would be an easier task. Or maybe a really restricted "ash" called "rash" -because it is- with maybe autocomplete and that's it. Hardcoded $PATH and the like.