rbash

Start restricted shell

$ rbash

$ rbash -c "[command]"

$ rbash [script.sh]

rbash [options] [script]

rbash is a restricted mode of the Bash shell that limits user actions to prevent unauthorized system access. When invoked as rbash (or via bash -r), it disables directory changes with cd, prevents modification of PATH, SHELL, ENV, and BASH_ENV variables, and blocks output redirection with >, >>, and related operators.
The restrictions also prevent commands containing slashes (blocking direct paths like /bin/command), use of the exec builtin, and importing of functions from the environment. This makes it useful for providing limited shell access to untrusted users when combined with a carefully controlled PATH containing only approved commands.

-c STRING

Execute command string.

Interactive mode.

Login shell.

Restricted mode (default).

- No cd command
- No PATH changes
- No output redirection
- No exec command
- No command substitution assignment

Can be escaped via scripts. Not security boundary. Use with other controls.

rbash is bash started as restricted shell. It provides a limited environment for untrusted users.

bash(1), chroot(1), sudo(1)