Content deleted Content added
Guy Harris (talk | contribs) Consistently speak of *a* CLI or GUI - "interface" is a countable noun. |
Guy Harris (talk | contribs) →CLI and resource protection: Note that not *all* CLIs support PATH; give Unix-like systems and Windows as systems that support PATH, and speak of PATH *and equivalents* for other systems that allow this. In the "restrict available commands" paragraph, mention restricted shells, where setting PATH to include only directories with permissible commands limits the user's ability to run other commands. |
||
Line 96:
===CLI and resource protection===
The command line allows one to restrict available commands, such as access to advanced internal commands. The [[Bourne shell]] and workalikes such as [[Bash (Unix shell)|Bash]] can be run as a [[restricted shell]]; among other things, this prohibits the user from modifying the PATH environment variable, so that if PATH is set to include only directories that contain only permissible commands, the user will only be able to run those commands. The Windows [[CMD.EXE]]
Some CLIs, such as those in [[network router]]s, have a hierarchy of [[mode (user interface)|mode]]s, with a different set of commands supported in each mode. The set of commands are grouped by association with security, system, interface, etc. In these systems the user might traverse through a series of sub-modes. For example, if the CLI had two modes called ''interface'' and ''system'', the user might use the command ''interface'' to enter the interface mode. At this point, commands from the system mode may not be accessible until the user exits the interface mode and enters the system mode.
|