2021-05-11 02:29:21 +02:00
<!DOCTYPE HTML>
< html lang = "en" class = "sidebar-visible no-js light" >
< head >
<!-- Book generated using mdBook -->
< meta charset = "UTF-8" >
< title > Invocation - Zsh Manual< / title >
<!-- Custom HTML head -->
< meta content = "text/html; charset=utf-8" http-equiv = "Content-Type" >
< meta name = "description" content = "" >
< meta name = "viewport" content = "width=device-width, initial-scale=1" >
< meta name = "theme-color" content = "#ffffff" / >
< link rel = "icon" href = "favicon.svg" >
< link rel = "shortcut icon" href = "favicon.png" >
< link rel = "stylesheet" href = "css/variables.css" >
< link rel = "stylesheet" href = "css/general.css" >
< link rel = "stylesheet" href = "css/chrome.css" >
< link rel = "stylesheet" href = "css/print.css" media = "print" >
<!-- Fonts -->
< link rel = "stylesheet" href = "FontAwesome/css/font-awesome.css" >
< link rel = "stylesheet" href = "fonts/fonts.css" >
<!-- Highlight.js Stylesheets -->
< link rel = "stylesheet" href = "highlight.css" >
< link rel = "stylesheet" href = "tomorrow-night.css" >
< link rel = "stylesheet" href = "ayu-highlight.css" >
<!-- Custom theme stylesheets -->
2022-09-01 07:20:37 +02:00
< link rel = "stylesheet" href = "./theme/catppuccin.css" >
< link rel = "stylesheet" href = "./theme/catppuccin-highlight.css" >
2021-05-11 02:29:21 +02:00
< / head >
< body >
<!-- Provide site root to javascript -->
< script type = "text/javascript" >
var path_to_root = "";
var default_theme = window.matchMedia("(prefers-color-scheme: dark)").matches ? "navy" : "light";
< / script >
<!-- Work around some values being stored in localStorage wrapped in quotes -->
< script type = "text/javascript" >
try {
var theme = localStorage.getItem('mdbook-theme');
var sidebar = localStorage.getItem('mdbook-sidebar');
if (theme.startsWith('"') & & theme.endsWith('"')) {
localStorage.setItem('mdbook-theme', theme.slice(1, theme.length - 1));
}
if (sidebar.startsWith('"') & & sidebar.endsWith('"')) {
localStorage.setItem('mdbook-sidebar', sidebar.slice(1, sidebar.length - 1));
}
} catch (e) { }
< / script >
<!-- Set the theme before any content is loaded, prevents flash -->
< script type = "text/javascript" >
var theme;
try { theme = localStorage.getItem('mdbook-theme'); } catch(e) { }
if (theme === null || theme === undefined) { theme = default_theme; }
var html = document.querySelector('html');
html.classList.remove('no-js')
html.classList.remove('light')
html.classList.add(theme);
html.classList.add('js');
< / script >
<!-- Hide / unhide sidebar before it is displayed -->
< script type = "text/javascript" >
var html = document.querySelector('html');
var sidebar = 'hidden';
if (document.body.clientWidth >= 1080) {
try { sidebar = localStorage.getItem('mdbook-sidebar'); } catch(e) { }
sidebar = sidebar || 'visible';
}
html.classList.remove('sidebar-visible');
html.classList.add("sidebar-" + sidebar);
< / script >
< nav id = "sidebar" class = "sidebar" aria-label = "Table of contents" >
< div class = "sidebar-scrollbox" >
2022-08-24 15:22:41 +02:00
< ol class = "chapter" > < li class = "chapter-item expanded " > < a href = "The-Z-Shell-Manual.html" > < strong aria-hidden = "true" > 1.< / strong > The Z Shell Manual< / a > < / li > < li class = "chapter-item expanded " > < a href = "Introduction.html" > < strong aria-hidden = "true" > 2.< / strong > Introduction< / a > < / li > < li class = "chapter-item expanded " > < a href = "Roadmap.html" > < strong aria-hidden = "true" > 3.< / strong > Roadmap< / a > < / li > < li class = "chapter-item expanded " > < a href = "Invocation.html" class = "active" > < strong aria-hidden = "true" > 4.< / strong > Invocation< / a > < / li > < li class = "chapter-item expanded " > < a href = "Files.html" > < strong aria-hidden = "true" > 5.< / strong > Files< / a > < / li > < li class = "chapter-item expanded " > < a href = "Shell-Grammar.html" > < strong aria-hidden = "true" > 6.< / strong > Shell Grammar< / a > < / li > < li class = "chapter-item expanded " > < a href = "Redirection.html" > < strong aria-hidden = "true" > 7.< / strong > Redirection< / a > < / li > < li class = "chapter-item expanded " > < a href = "Command-Execution.html" > < strong aria-hidden = "true" > 8.< / strong > Command Execution< / a > < / li > < li class = "chapter-item expanded " > < a href = "Functions.html" > < strong aria-hidden = "true" > 9.< / strong > Functions< / a > < / li > < li class = "chapter-item expanded " > < a href = "Jobs-&-Signals.html" > < strong aria-hidden = "true" > 10.< / strong > Jobs & Signals< / a > < / li > < li class = "chapter-item expanded " > < a href = "Arithmetic-Evaluation.html" > < strong aria-hidden = "true" > 11.< / strong > Arithmetic Evaluation< / a > < / li > < li class = "chapter-item expanded " > < a href = "Conditional-Expressions.html" > < strong aria-hidden = "true" > 12.< / strong > Conditional Expressions< / a > < / li > < li class = "chapter-item expanded " > < a href = "Prompt-Expansion.html" > < strong aria-hidden = "true" > 13.< / strong > Prompt Expansion< / a > < / li > < li class = "chapter-item expanded " > < a href = "Expansion.html" > < strong aria-hidden = "true" > 14.< / strong > Expansion< / a > < / li > < li class = "chapter-item expanded " > < a href = "Parameters.html" > < strong aria-hidden = "true" > 15.< / strong > Parameters< / a > < / li > < li class = "chapter-item expanded " > < a href = "Options.html" > < strong aria-hidden = "true" > 16.< / strong > Options< / a > < / li > < li class = "chapter-item expanded " > < a href = "Shell-Builtin-Commands.html" > < strong aria-hidden = "true" > 17.< / strong > Shell Builtin Commands< / a > < / li > < li class = "chapter-item expanded " > < a href = "Zsh-Line-Editor.html" > < strong aria-hidden = "true" > 18.< / strong > Zsh Line Editor< / a > < / li > < li class = "chapter-item expanded " > < a href = "Completion-Widgets.html" > < strong aria-hidden = "true" > 19.< / strong > Completion Widgets< / a > < / li > < li class = "chapter-item expanded " > < a href = "Completion-System.html" > < strong aria-hidden = "true" > 20.< / strong > Completion System< / a > < / li > < li class = "chapter-item expanded " > < a href = "Completion-Using-compctl.html" > < strong aria-hidden = "true" > 21.< / strong > Completion Using compctl< / a > < / li > < li class = "chapter-item expanded " > < a href = "Zsh-Modules.html" > < strong aria-hidden = "true" > 22.< / strong > Zsh Modules< / a > < / li > < li class = "chapter-item expanded " > < a href = "Calendar-Function-System.html" > < strong aria-hidden = "true" > 23.< / strong > Calendar Function System< / a > < / li > < li class = "chapter-item expanded " > < a href = "TCP-Function-System.html" > < strong aria-hidden = "true" > 24.< / strong > TCP Function System< / a > < / li > < li class = "chapter-item expanded " > < a href = "Zftp-Function-System.html" > < strong aria-hidden = "true" > 25.< / strong > Zftp Function System< / a > < / li > < li class = "chapter-item expanded " > < a href = "User-Contributions.html" > < strong aria-hidden = "true" > 26.< / strong > User Contributions< / a > < / li > < / ol >
2021-05-11 02:29:21 +02:00
< / div >
< div id = "sidebar-resize-handle" class = "sidebar-resize-handle" > < / div >
< / nav >
< div id = "page-wrapper" class = "page-wrapper" >
< div class = "page" >
2022-08-24 15:22:41 +02:00
< div id = "menu-bar-hover-placeholder" > < / div >
2021-05-11 02:29:21 +02:00
< div id = "menu-bar" class = "menu-bar sticky bordered" >
< div class = "left-buttons" >
< button id = "sidebar-toggle" class = "icon-button" type = "button" title = "Toggle Table of Contents" aria-label = "Toggle Table of Contents" aria-controls = "sidebar" >
< i class = "fa fa-bars" > < / i >
< / button >
< button id = "theme-toggle" class = "icon-button" type = "button" title = "Change theme" aria-label = "Change theme" aria-haspopup = "true" aria-expanded = "false" aria-controls = "theme-list" >
< i class = "fa fa-paint-brush" > < / i >
< / button >
< ul id = "theme-list" class = "theme-popup" aria-label = "Themes" role = "menu" >
< li role = "none" > < button role = "menuitem" class = "theme" id = "light" > Light (default)< / button > < / li >
< li role = "none" > < button role = "menuitem" class = "theme" id = "rust" > Rust< / button > < / li >
< li role = "none" > < button role = "menuitem" class = "theme" id = "coal" > Coal< / button > < / li >
< li role = "none" > < button role = "menuitem" class = "theme" id = "navy" > Navy< / button > < / li >
< li role = "none" > < button role = "menuitem" class = "theme" id = "ayu" > Ayu< / button > < / li >
2022-09-01 07:20:37 +02:00
< li role = "none" > < button role = "menuitem" class = "theme" id = "latte" > Latte< / button > < / li >
< li role = "none" > < button role = "menuitem" class = "theme" id = "frappe" > Frappé< / button > < / li >
< li role = "none" > < button role = "menuitem" class = "theme" id = "macchiato" > Macchiato< / button > < / li >
< li role = "none" > < button role = "menuitem" class = "theme" id = "mocha" > Mocha< / button > < / li >
2021-05-11 02:29:21 +02:00
< / ul >
< button id = "search-toggle" class = "icon-button" type = "button" title = "Search. (Shortkey: s)" aria-label = "Toggle Searchbar" aria-expanded = "false" aria-keyshortcuts = "S" aria-controls = "searchbar" >
< i class = "fa fa-search" > < / i >
< / button >
< / div >
< h1 class = "menu-title" > Zsh Manual< / h1 >
< div class = "right-buttons" >
< a href = "print.html" title = "Print this book" aria-label = "Print this book" >
< i id = "print-button" class = "fa fa-print" > < / i >
< / a >
2021-05-17 17:00:52 +02:00
2021-05-11 02:29:21 +02:00
< / div >
< / div >
< div id = "search-wrapper" class = "hidden" >
< form id = "searchbar-outer" class = "searchbar-outer" >
2021-05-17 17:00:52 +02:00
< input type = "search" id = "searchbar" name = "searchbar" placeholder = "Search this book ..." aria-controls = "searchresults-outer" aria-describedby = "searchresults-header" >
2021-05-11 02:29:21 +02:00
< / form >
< div id = "searchresults-outer" class = "searchresults-outer hidden" >
< div id = "searchresults-header" class = "searchresults-header" > < / div >
< ul id = "searchresults" >
< / ul >
< / div >
< / div >
<!-- Apply ARIA attributes after the sidebar and the sidebar toggle button are added to the DOM -->
< script type = "text/javascript" >
document.getElementById('sidebar-toggle').setAttribute('aria-expanded', sidebar === 'visible');
document.getElementById('sidebar').setAttribute('aria-hidden', sidebar !== 'visible');
Array.from(document.querySelectorAll('#sidebar a')).forEach(function(link) {
link.setAttribute('tabIndex', sidebar === 'visible' ? 0 : -1);
});
< / script >
< div id = "content" class = "content" >
< main >
<!-- START doctoc generated TOC please keep comment here to allow auto update -->
<!-- DON'T EDIT THIS SECTION, INSTEAD RE - RUN doctoc TO UPDATE -->
< p > < strong > Table of Contents< / strong > < em > generated with < a href = "https://github.com/thlorenz/doctoc" > DocToc< / a > < / em > < / p >
< ul >
< li > < a href = "#4-invocation" > 4 Invocation< / a >
< ul >
< li > < a href = "#41-invocation" > 4.1 Invocation< / a > < / li >
< li > < a href = "#42-compatibility" > 4.2 Compatibility< / a > < / li >
< li > < a href = "#43-restricted-shell" > 4.3 Restricted Shell< / a > < / li >
< / ul >
< / li >
< / ul >
<!-- END doctoc generated TOC please keep comment here to allow auto update -->
2022-08-24 15:22:41 +02:00
< p > < span id = "Invocation" > < / span > < span id = "Invocation-2" > < / span > < / p >
2021-05-11 02:29:21 +02:00
< h1 id = "4-invocation" > < a class = "header" href = "#4-invocation" > 4 Invocation< / a > < / h1 >
< p > < span id = "index-invocation" > < / span > < / p >
< hr / >
2022-08-24 15:22:41 +02:00
< p > < span id = "Invocation-1" > < / span > < / p >
2021-05-11 02:29:21 +02:00
< h2 id = "41-invocation" > < a class = "header" href = "#41-invocation" > 4.1 Invocation< / a > < / h2 >
2022-08-24 15:22:41 +02:00
< p > < span id = "index-shell-options" > < / span > < span
id="index-options_002c-shell">< / span > < span
id="index-shell-flags">< / span > < span id = "index-flags_002c-shell" > < / span > < / p >
2021-05-11 02:29:21 +02:00
< p > The following flags are interpreted by the shell when invoked to
determine where the shell will read commands from:< / p >
2022-08-24 15:22:41 +02:00
< p > -c< br / >
2021-05-11 02:29:21 +02:00
Take the first argument as a command to execute, rather than reading
2022-08-24 15:22:41 +02:00
commands from a script or standard input. If any further arguments are
given, the first one is assigned to $0, rather than being used as a
positional parameter.< / p >
< p > -i< br / >
Force shell to be interactive. It is still possible to specify a script
to execute.< / p >
< p > -s< br / >
Force shell to read commands from the standard input. If the -s flag is
not present and an argument is given, the first argument is taken to be
the pathname of a script to execute.< / p >
2021-05-11 02:29:21 +02:00
< p > If there are any remaining arguments after option processing, and
2022-08-24 15:22:41 +02:00
neither of the options -c or -s was supplied, the first argument is
2021-05-11 02:29:21 +02:00
taken as the file name of a script containing shell commands to be
2022-08-24 15:22:41 +02:00
executed. If the option PATH_SCRIPT is set, and the file name does not
contain a directory path (i.e. there is no ‘ ’
current directory and then the command path given by the variable PATH
2021-05-11 02:29:21 +02:00
are searched for the script. If the option is not set or the file name
2022-08-24 15:22:41 +02:00
contains a ‘ ’ < / p >
2021-05-11 02:29:21 +02:00
< p > After the first one or two arguments have been appropriated as described
above, the remaining arguments are assigned to the positional
parameters.< / p >
2022-08-24 15:22:41 +02:00
< p > For further options, which are common to invocation and the set builtin,
see < a href = "Options.html#Options" > Options< / a > .< / p >
< p > The long option ‘ ’
2021-05-11 02:29:21 +02:00
emulation mode may be passed to the shell. The emulation modes are those
2022-08-24 15:22:41 +02:00
described for the emulate builtin, see < a href = "Shell-Builtin-Commands.html#Shell-Builtin-Commands" > Shell Builtin
2021-05-11 02:29:21 +02:00
Commands< / a > . The
2022-08-24 15:22:41 +02:00
‘ ’
be overridden), but following options are honoured, so may be used to
modify the requested emulation mode. Note that certain extra steps are
taken to ensure a smooth emulation when this option is used compared
with the emulate command within the shell: for example, variables that
conflict with POSIX usage such as path are not defined within the shell.< / p >
< p > Options may be specified by name using the -o option. -o acts like a
2021-05-11 02:29:21 +02:00
single-letter option, but takes a following string as the option name.
For example,< / p >
< div class = "example" >
2022-08-24 15:22:41 +02:00
< pre > < code class = "language-zsh" > zsh -x -o shwordsplit scr
2021-05-11 02:29:21 +02:00
< / code > < / pre >
< / div >
2022-08-24 15:22:41 +02:00
< p > runs the script scr, setting the XTRACE option by the corresponding
letter ‘ ’
< em > off< / em > by name by using +o instead of -o. -o can be stacked up with
preceding single-letter options, so for example ‘ ’
‘ ’ ‘ ’ < / p >
2021-05-11 02:29:21 +02:00
< p > < span id = "index-long-option" > < / span > < / p >
< p > Options may also be specified by name in GNU long option style,
2022-08-24 15:22:41 +02:00
‘ < code > option-name< / code > ’ ‘ ’
are permitted: they are translated into ‘ ’
example, ‘ ’
turned on. Like other option syntaxes, options can be turned off by
replacing the initial ‘ ’ ‘ ’ ‘ ’
equivalent to ‘ ’
GNU-style long options cannot be stacked with any other options, so for
example ‘ ’ ‘
--shwordsplit’ < / p >
< p > < span id = "index-_002d_002dversion" > < / span > < span
id="index-_002d_002dhelp">< / span > < / p >
< p > The special GNU-style option ‘ ’
2021-05-11 02:29:21 +02:00
standard output the shell’
2022-08-24 15:22:41 +02:00
successfully. ‘ ’
list of options that can be used when invoking the shell, then exits
2021-05-11 02:29:21 +02:00
successfully.< / p >
< p > Option processing may be finished, allowing following arguments that
2022-08-24 15:22:41 +02:00
start with ‘ ’ ‘ ’
Firstly, a lone ‘ ’ ‘ ’
processing. Secondly, a special option ‘ ’ ‘ ’
specified on its own (which is the standard POSIX usage) or may be
stacked with preceding options (so ‘ ’ ‘ ’
Options are not permitted to be stacked after ‘ ’ ‘ ’
error), but note the GNU-style option form discussed above, where
‘ ’ < / p >
2021-05-11 02:29:21 +02:00
< p > Except when the sh/ksh emulation single-letter options are in effect,
2022-08-24 15:22:41 +02:00
the option ‘ ’ ‘ ’ ‘ ’ ‘ ’
except that further single-letter options can be stacked after the ‘ ’
and will take effect as normal.< / p >
2021-05-11 02:29:21 +02:00
< hr / >
< p > < span id = "Compatibility" > < / span > < span id = "Compatibility-1" > < / span > < / p >
< h2 id = "42-compatibility" > < a class = "header" href = "#42-compatibility" > 4.2 Compatibility< / a > < / h2 >
2022-08-24 15:22:41 +02:00
< p > < span id = "index-compatibility" > < / span > < span
id="index-sh-compatibility">< / span > < span
id="index-ksh-compatibility">< / span > < / p >
< p > Zsh tries to emulate sh or ksh when it is invoked as sh or ksh
2021-05-11 02:29:21 +02:00
respectively; more precisely, it looks at the first letter of the name
2022-08-24 15:22:41 +02:00
by which it was invoked, excluding any initial ‘ ’
‘ ’ ‘ ’ ‘ ’ ‘ ’
Furthermore, if invoked as su (which happens on certain systems when the
shell is executed by the su command), the shell will try to find an
alternative name from the SHELL environment variable and perform
emulation based on that.< / p >
2021-05-11 02:29:21 +02:00
< p > In sh and ksh compatibility modes the following parameters are not
2022-08-24 15:22:41 +02:00
special and not initialized by the shell: ARGC, argv, cdpath, fignore,
fpath, HISTCHARS, mailpath, MANPATH, manpath, path, prompt, PROMPT,
PROMPT2, PROMPT3, PROMPT4, psvar, status.< / p >
2021-05-11 02:29:21 +02:00
< p > < span id = "index-ENV_002c-use-of" > < / span > < / p >
< p > The usual zsh startup/shutdown scripts are not executed. Login shells
2022-08-24 15:22:41 +02:00
source /etc/profile followed by $HOME/.profile. If the ENV environment
variable is set on invocation, $ENV is sourced after the profile
scripts. The value of ENV is subjected to parameter expansion, command
substitution, and arithmetic expansion before being interpreted as a
pathname. Note that the PRIVILEGED option also affects the execution of
startup files.< / p >
< p > The following options are set if the shell is invoked as sh or ksh:
NO_BAD_PATTERN, NO_BANG_HIST, NO_BG_NICE, NO_EQUALS,
NO_FUNCTION_ARGZERO, GLOB_SUBST, NO_GLOBAL_EXPORT, NO_HUP,
INTERACTIVE_COMMENTS, KSH_ARRAYS, NO_MULTIOS, NO_NOMATCH, NO_NOTIFY,
POSIX_BUILTINS, NO_PROMPT_PERCENT, RM_STAR_SILENT, SH_FILE_EXPANSION,
SH_GLOB, SH_OPTION_LETTERS, SH_WORD_SPLIT. Additionally the BSD_ECHO and
IGNORE_BRACES options are set if zsh is invoked as sh. Also, the
KSH_OPTION_PRINT, LOCAL_OPTIONS, PROMPT_BANG, PROMPT_SUBST and
SINGLE_LINE_ZLE options are set if zsh is invoked as ksh.< / p >
< p > Please note that, whilst reasonable efforts are taken to address
incompatibilities when they arise, zsh does not guarantee complete
emulation of other shells, nor POSIX compliance. For more information on
the differences between zsh and other shells, please refer to chapter
of the shell FAQ, < a href = "https://www.zsh.org/FAQ/" > https://www.zsh.org/FAQ/< / a > .< / p >
2021-05-11 02:29:21 +02:00
< hr / >
2022-08-24 15:22:41 +02:00
< p > < span id = "Restricted-Shell" > < / span > < span
id="Restricted-Shell-1">< / span > < / p >
2021-05-11 02:29:21 +02:00
< h2 id = "43-restricted-shell" > < a class = "header" href = "#43-restricted-shell" > 4.3 Restricted Shell< / a > < / h2 >
2022-08-24 15:22:41 +02:00
< p > < span id = "index-restricted-shell" > < / span > < span
id="index-RESTRICTED">< / span > < / p >
2021-05-11 02:29:21 +02:00
< p > When the basename of the command used to invoke zsh starts with the
2022-08-24 15:22:41 +02:00
letter ‘ ’ ‘ ’
the shell becomes restricted. Emulation mode is determined after
stripping the letter ‘ ’
disabled in restricted mode:< / p >
2021-05-11 02:29:21 +02:00
< ul >
2022-08-24 15:22:41 +02:00
< li > changing directories with the cd builtin< / li >
< li > changing or unsetting the EGID, EUID, GID, HISTFILE, HISTSIZE, IFS,
LD_AOUT_LIBRARY_PATH, LD_AOUT_PRELOAD, LD_LIBRARY_PATH, LD_PRELOAD,
MODULE_PATH, module_path, PATH, path, SHELL, UID and USERNAME
parameters< / li >
< li > specifying command names containing /< / li >
< li > specifying command pathnames using hash< / li >
2021-05-11 02:29:21 +02:00
< li > redirecting output to files< / li >
2022-08-24 15:22:41 +02:00
< li > using the exec builtin command to replace the shell with another
2021-05-11 02:29:21 +02:00
command< / li >
2022-08-24 15:22:41 +02:00
< li > using jobs -Z to overwrite the shell process’
2021-05-11 02:29:21 +02:00
environment space< / li >
2022-08-24 15:22:41 +02:00
< li > using the ARGV0 parameter to override argv[0] for external
2021-05-11 02:29:21 +02:00
commands< / li >
2022-08-24 15:22:41 +02:00
< li > turning off restricted mode with set +r or unsetopt RESTRICTED< / li >
2021-05-11 02:29:21 +02:00
< / ul >
< p > These restrictions are enforced after processing the startup files. The
2022-08-24 15:22:41 +02:00
startup files should set up PATH to point to a directory of commands
2021-05-11 02:29:21 +02:00
which can be safely invoked in the restricted environment. They may also
add further restrictions by disabling selected builtins.< / p >
2022-08-24 15:22:41 +02:00
< p > Restricted mode can also be activated any time by setting the RESTRICTED
option. This immediately enables all the restrictions described above
even if the shell still has not processed all startup files.< / p >
2021-05-11 02:29:21 +02:00
< p > A shell < em > Restricted Mode< / em > is an outdated way to restrict what users may
do: modern systems have better, safer and more reliable ways to confine
user actions, such as < em > chroot jails< / em > , < em > containers< / em > and < em > zones< / em > .< / p >
< p > A restricted shell is very difficult to implement safely. The feature
may be removed in a future version of zsh.< / p >
< p > It is important to realise that the restrictions only apply to the
shell, not to the commands it runs (except for some shell builtins).
While a restricted shell can only run the restricted list of commands
2022-08-24 15:22:41 +02:00
accessible via the predefined ‘ ’
commands from running any other command.< / p >
< p > As an example, if ‘ ’ < em > allowed< / em > commands, then it
allows the user to run any command as ‘ ’ < / p >
2021-05-11 02:29:21 +02:00
< p > So when implementing a restricted shell framework it is important to be
fully aware of what actions each of the < em > allowed< / em > commands or features
(which may be regarded as < em > modules< / em > ) can perform.< / p >
< p > Many commands can have their behaviour affected by environment
variables. Except for the few listed above, zsh does not restrict the
setting of environment variables.< / p >
2022-08-24 15:22:41 +02:00
< p > If a ‘ ’ ‘ ’ ‘ ’
script it treated as a restricted command, the user can work around the
restriction by setting specially crafted ‘ ’ ‘ ’
‘ ’
be made to run arbitrary code when performing character set conversion
(including zsh itself) by setting a ‘ ’
Those are only a few examples.< / p >
< p > Bear in mind that, contrary to some other shells, ‘ ’
2021-05-11 02:29:21 +02:00
security feature in zsh as it can be undone and so cannot be used to
mitigate the above.< / p >
< p > A restricted shell only works if the allowed commands are few and
carefully written so as not to grant more access to users than intended.
It is also important to restrict what zsh module the user may load as
2022-08-24 15:22:41 +02:00
some of them, such as ‘ ’ ‘ ’ ‘ ’
bypassing most of the restrictions.< / p >
2021-05-11 02:29:21 +02:00
< hr / >
2022-08-24 15:22:41 +02:00
< p > This document was generated on < em > May 14, 2022< / em > using < a href = "http://www.nongnu.org/texi2html/" > < em > texi2html
5.0< / em > < / a > .< br / >
Zsh version 5.9, released on May 14, 2022.< / p >
2021-05-11 02:29:21 +02:00
< / main >
< nav class = "nav-wrapper" aria-label = "Page navigation" >
<!-- Mobile navigation buttons -->
< a rel = "prev" href = "Roadmap.html" class = "mobile-nav-chapters previous" title = "Previous chapter" aria-label = "Previous chapter" aria-keyshortcuts = "Left" >
< i class = "fa fa-angle-left" > < / i >
< / a >
< a rel = "next" href = "Files.html" class = "mobile-nav-chapters next" title = "Next chapter" aria-label = "Next chapter" aria-keyshortcuts = "Right" >
< i class = "fa fa-angle-right" > < / i >
< / a >
< div style = "clear: both" > < / div >
< / nav >
< / div >
< / div >
< nav class = "nav-wide-wrapper" aria-label = "Page navigation" >
< a rel = "prev" href = "Roadmap.html" class = "nav-chapters previous" title = "Previous chapter" aria-label = "Previous chapter" aria-keyshortcuts = "Left" >
< i class = "fa fa-angle-left" > < / i >
< / a >
< a rel = "next" href = "Files.html" class = "nav-chapters next" title = "Next chapter" aria-label = "Next chapter" aria-keyshortcuts = "Right" >
< i class = "fa fa-angle-right" > < / i >
< / a >
< / nav >
< / div >
2022-09-01 07:20:37 +02:00
<!-- Livereload script (if served using the cli tool) -->
< script type = "text/javascript" >
const wsProtocol = location.protocol === 'https:' ? 'wss:' : 'ws:';
const wsAddress = wsProtocol + "//" + location.host + "/" + "__livereload";
const socket = new WebSocket(wsAddress);
socket.onmessage = function (event) {
if (event.data === "reload") {
socket.close();
location.reload();
}
};
window.onbeforeunload = function() {
socket.close();
}
< / script >
2021-05-11 02:29:21 +02:00
< script type = "text/javascript" >
window.playground_copyable = true;
< / script >
< script src = "elasticlunr.min.js" type = "text/javascript" charset = "utf-8" > < / script >
< script src = "mark.min.js" type = "text/javascript" charset = "utf-8" > < / script >
< script src = "searcher.js" type = "text/javascript" charset = "utf-8" > < / script >
< script src = "clipboard.min.js" type = "text/javascript" charset = "utf-8" > < / script >
< script src = "highlight.js" type = "text/javascript" charset = "utf-8" > < / script >
< script src = "book.js" type = "text/javascript" charset = "utf-8" > < / script >
<!-- Custom JS scripts -->
< / body >
< / html >
