12.13. Security

12.13.1 Privileged Scripts

A script is privileged if the Korn shell is invoked with the –p option. When the privileged option is used and the real UID and/or the real GID are not the same as the effective UID or effective GID, the .profile will not be executed and a system file called etc/suid_profile will be executed instead of the ENV file.

12.13.2 Restricted Shells

When the Korn shell is invoked with the –r option, the shell is restricted. When the shell is restricted, the cd command cannot be used and the SHELL, ENV , and PATH variables cannot be modified or unset; commands cannot be executed if the first character is a backslash; and the redirection operators (>, <, |, >>) are illegal. This option cannot be unset or set with the set command. The command rksh will invoke a restricted shell.