diff options
| author | matveyt <matthewtarasov@gmail.com> | 2022-02-01 17:26:12 +0000 |
|---|---|---|
| committer | Bram Moolenaar <Bram@vim.org> | 2022-02-01 17:26:12 +0000 |
| commit | adbb1bf21dad5697cd82d46d9dd9e8e8d0f647e6 (patch) | |
| tree | 4d33ea62fadc04d671829e15a0b8edf130fcc8e3 /runtime/doc/starting.txt | |
| parent | 9b4a80a66544f2782040b641498754bcb5b8d461 (diff) | |
patch 8.2.4282: restricted mode requires the -Z command line optionv8.2.4282
Problem: Restricted mode requires the -Z command line option.
Solution: Use restricted mode when $SHELL ends in "nologin" or "false".
(closes #9681)
Diffstat (limited to 'runtime/doc/starting.txt')
| -rw-r--r-- | runtime/doc/starting.txt | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/runtime/doc/starting.txt b/runtime/doc/starting.txt index f56baf6bc7..bca2f97042 100644 --- a/runtime/doc/starting.txt +++ b/runtime/doc/starting.txt @@ -256,6 +256,8 @@ a slash. Thus "-R" means recovery and "-/R" readonly. Interfaces, such as Python, Ruby and Lua, are also disabled, since they could be used to execute shell commands. Perl uses the Safe module. + For Unix restricted mode is used when the last part of $SHELL + is "nologin" or "false". Note that the user may still find a loophole to execute a shell command, it has only been made difficult. |