Visit Our UNIX and Linux User Community


PATH manipulation


 
Thread Tools Search this Thread
Top Forums Shell Programming and Scripting PATH manipulation
# 8  
Old 09-10-2009
dr.house, as you said there can be "n" number of possibilities the user can find out that he is being manipulated so I am thinking dropping this idea of making all this transparent to user. Let user know it. My goal is now to "execute a clone commands from /mydir if available else execute from normal system path" (if user fails authentication). If I use changing user PATH approach inside a script then my problem boils down to just make sure user is restricted to changing PATH. Now the only question remains is "how to restrict unauthenticated user change his PATH?", otherwise there is no difference between authenticated Vs unauthenticated user.

Will try implementing strategies you have suggested. chroot is out of question as it would require a lot of set up in terms of copying the binaries and other things from "real root" to new root. SELinux, not given a thought yet. But as now problem reduced to just restricting user of changing PATH these options may not be appropriate.
# 9  
Old 09-10-2009
Quote:
Originally Posted by ramesh_samane
how to restrict unauthenticated user change his PATH?
No way, I daresay - as you don't even need 'export' to update a PATH (at least for the session being ...):

Code:
[house@leonov] id
uid=1000(house) gid=1000(house) 
[house@leonov] echo $PATH
/usr/bin:/bin:/usr/sbin:/sbin
[house@leonov] PATH=/illegalPath:$PATH
[house@leonov] echo $PATH
/illegalPath:/usr/bin:/bin:/usr/sbin:/sbin

# 10  
Old 09-10-2009
Quote:
Originally Posted by dr.house
No way, I daresay - as you don't even need 'export' to update a PATH (at least for the session being ...)
Agreed, so do you think it is NOT possible to restrict user from changing PATH?

I was thinking of exploring this possibility but if it is at all not possible then may be I can direct my thoughts towards finding alternate ways rather than considering this solution. Please comment.
# 11  
Old 09-10-2009
You may set the variable readonly:

Code:
bash-3.2.49(22)[~]$ declare -rx PATH
bash-3.2.49(22)[~]$ PATH=
bash: PATH: readonly variable

But this could be easily "bypassed" by spawning a new shell:

Code:
bash-3.2.49(22)[~]$ declare -rx PATH
bash-3.2.49(22)[~]$ PATH=
bash: PATH: readonly variable
bash-3.2.49(22)[~]$ bash
bash-3.2.49(22)[~]$ PATH=
bash-3.2.49(22)[~]$

With some versions of ksh (tested with ksh93) you can export the variable as readonly:

Code:
zsh-4.3.10[sysadmin]% ksh93
ksh-M 93t 2008-11-04$ typeset -rx PATH
ksh-M 93t 2008-11-04$ PATH=
/var/opt/ast/bin/ksh: PATH: is read only
ksh-M 93t 2008-11-04$ /var/opt/ast/bin/ksh
ksh-M 93t 2008-11-04$ PATH=               
/var/opt/ast/bin/ksh: PATH: is read only

... but, of course, the user could run something like this:

Code:
ksh-M 93t 2008-11-04$ bash -c 'PATH=.;echo $PATH'
.
ksh-M 93t 2008-11-04$

# 12  
Old 09-10-2009
Just one random thought came into my mind. Can we TRAP ENTER/RETURN key and run our script whenever that key is pressed?
# 13  
Old 09-11-2009
Quote:
Originally Posted by ramesh_samane
Just one random thought came into my mind. Can we TRAP ENTER/RETURN key and run our script whenever that key is pressed?
Using trap, as far as I know, no.

Previous Thread | Next Thread
Test Your Knowledge in Computers #726
Difficulty: Medium
Satoshi Yamashita is a pseudonym for the anonymous creator or creators of Bitcoin.
True or False?

10 More Discussions You Might Find Interesting

1. Programming

Makefile missing include path Although the path exists and defined

i have make file which i try to make them generic but it keeps to compline it missing include directory this is the makefile : CXX=g++ CPPFAGS= -Wall -O0 -g -std=c++14 INCLUDES = -I/home/vagrant/libuv/include -Isrc LIBS_DIRS = -L/home/vagrant/libuv/build LDFLAGS=... (7 Replies)
Discussion started by: umen
7 Replies

2. UNIX for Beginners Questions & Answers

Convert Relative path to Absolute path, without changing directory to the file location.

Hello, I am creating a file with all the source folders included in my git branch, when i grep for the used source, i found source included as relative path instead of absolute path, how can convert relative path to absolute path without changing directory to that folder and using readlink -f ? ... (4 Replies)
Discussion started by: Sekhar419
4 Replies

3. UNIX for Advanced & Expert Users

Command to see the logical volume path, device mapper path and its corresponding dm device path

Currently I am using this laborious command lvdisplay | awk '/LV Path/ {p=$3} /LV Name/ {n=$3} /VG Name/ {v=$3} /Block device/ {d=$3; sub(".*:", "/dev/dm-", d); printf "%s\t%s\t%s\n", p, "/dev/mapper/"v"-"n, d}' Would like to know if there is any shorter method to get this mapping of... (2 Replies)
Discussion started by: royalibrahim
2 Replies

4. Shell Programming and Scripting

Generate class path dynamically based on source path

Hi experts, I have multiple file names ending with .jsp located in $SOME_DIR, $SOME_DIR/f1/,$SOME_DIR/f2/test,$SOME_DIR/f3/fa and there are equivalent class files in $SOME_DIR/WEB-INF/classes/_pages,$SOME_DIR/WEB-INF/classes/_pages/_f1,... (0 Replies)
Discussion started by: oraclermanpt
0 Replies

5. Shell Programming and Scripting

Pattern match a path anywhere in the line and replace it with new path

I want to pattern match only path part from below and replace them with new path string. LoadModule jk_module /fldrA/fldrBaf/fldrCaa/modules/mod_jk.so JkWorkersFile /fldrA/fldrBaf/fldrCaa/config/OHS/ohs1/workers.properties JkLogFile... (4 Replies)
Discussion started by: kchinnam
4 Replies

6. Shell Programming and Scripting

Moving files from parent path to multiple child path using bash in efficient way

Hi All, Can you please provide some pointers to move files from Base path to multiple paths in efficient way.Folder Structure is already created. /Path/AdminUser/User1/1111/Reports/aaa.txt to /Path/User1/1111/Reports/aaa.txt /Path/AdminUser/User1/2222/Reports/bbb.txt to... (6 Replies)
Discussion started by: karthikgv417
6 Replies

7. Shell Programming and Scripting

Retrieve directory path from full file path through sh

Hi, I have a file abcd.txt which has contents in the form of full path file names i.e. $home> vi abcd.txt /a/b/c/r1.txt /q/w/e/r2.txt /z/x/c/r3.txt Now I want to retrieve only the directory path name for each row i.e /a/b/c/ /q/w/e/ How to get the same through shell script?... (7 Replies)
Discussion started by: royzlife
7 Replies

8. UNIX for Advanced & Expert Users

PATH manipulation

I have a requirement like this: I have modified versions of certain internal/external commands that I am putting into some directory say /mydir. All the users will go an authentication check once they log in and based on the outcome there are two possibilities: 1. User passes... (1 Reply)
Discussion started by: ramesh_samane
1 Replies

9. Shell Programming and Scripting

Executing Commands From Non-Standard Path (Changing user's PATH secretely???)

Hi: I have a requirement as below: I have some standard Unix commands modified and kept them in a directory say /usr/clsh/bin. For example I have a script named "ls" kept here which is modified version of "ls" (say it always gives long listing i.e. ls -l). When any user logs on and types... (2 Replies)
Discussion started by: ramesh_samane
2 Replies

10. UNIX for Dummies Questions & Answers

vi - replacing a relative path with absolute path in a file

Hi, I have a file with about 60 lines of path: app-defaults/boxXYZ....... I want to change this to /my/path/goes/here/app-defaults/boxXYZ, but of course vi doesn't like the regualr :s/old/new/ command. Is there any other quick way to do this? Thanks ;) (2 Replies)
Discussion started by: Yinzer955i
2 Replies

Featured Tech Videos