[comp.mail.elm] ELM "Security"

larry@dprmpt.UUCP (Larry) (01/31/91)

Is there anything built into the ELM mailer to allow a system administrator
to "tighten up security" on ELM.  Specifically, we want to allow users to
use ELM for mail, but they must NOT be able to escape to the UNIX Shell or
run commands (other than printing).

Has anyone made these types of modifications, and if so, how difficult is it?
Also, how would you provent the user from escaping out of "vi" to a shell?
Can you keep him/her from changing the "editor" option and make them use
an editor that won't allow shell escapes.

ELM is a fine mailer, but, for some users in our environment, has far too
much "power" and "flexibility" (read "UNIX shell access").

Any help is appreciated.  An E-mail reply is requested.
-- 
* - * - * - * - * - * - * - * - * - * - * - * - * - * - * - * - * - * - *
* Larry Johnson                 * "If you're not the lead dog on the    *
* UUCP: ...!uunet!dprmpt!larry  *  sled team, the view never changes."  *
* - * - * - * - * - * - * - * - * - * - * - * - * - * - * - * - * - * - *