===============
 Safe Terminal
===============
-------------
 Version 0.4
-------------

.. image:: media/icon-128.jpg 
  :alt: Safe Terminal


links
=====

* Download_
* Source_
* Versions_
* `View Source`_
* Support_

.. _Download: http://nirs.freeshell.org/safe-terminal/versions/SafeTerminal-0.4.zip"
.. _Source: http://nirs.freeshell.org/safe-terminal/versions/SafeTerminal-0.4.src.tgz
.. _Versions: http://nirs.freeshell.org/safe-terminal/versions/
.. _`View Source`: http://nirs.freeshell.org/code/SafeTerminal/
.. _Support: mailto:nirs%20AT%20freeshell%20DOT%20org?subject=[Safe%20Terminal]%20


What is Safe Terminal?
======================

Safe Terminal prevent execution of shell scripts without user
confirmation. It is possible to create malicious shell scripts that
appears to be a safe file such as an image or a movie, but is actually
an application. Such script will be executed by Terminal on double click
without warning. Safe Terminal display an alert before executing a shell
script, allowing the user to confirm or cancel.

When released, Safe Terminal avoided a vulnerability when such shell
script could be executed by visiting malicious web site or opening a
mail attachment. This vulnerability is now fixed by `Security Update
2006-001`_. However, this security update does not replace Safe
Terminal; it will not warn before executing shell scripts.

.. figure:: media/alert.jpg
   :alt: alert

   Alert displayed before executing a script
   
.. _`Security Update 2006-001`: http://docs.info.apple.com/article.html?artnum=303382


What's new in this version
==========================

* Localized for French, Catalan, Spanish and Hebrew.
* Quit Terminal when canceling a script at startup.
* Do not open a new shell when executing a script on startup.
* Fixed test.command for users that do not use bash shell

Install
=======

.. class:: steps

1. Log in as an administrator.
2. Copy the folder named *Safe Terminal* in the disk image into
   *InputManagers* folder inside the *Library* folder in the volume Mac OS X
   is installed.
3. If Terminal is running, restart it.

If the *InputManagers* folder does not exists, create it.

If you are not allowed to administer this computer, or want to install only for your account, you may install into the *InputManagers* folder inside the Library folder inside your home folder.

To verify the installation, double click the file named "test.command" in the disk image. A warning dialog will ask you "Are you sure you want to execute test.command?". Click Cancel or press the Escape key to cancel. Without Safe Terminal a new shell window will open, and the script will execute.


Uninstall
=========

.. class:: steps

1. If you installed as administrator, you have to login as one.
2. Move Safe Terminal folder from the *InputManagers* folder.
3. If Terminal is running, restart it.


Known Issues
============

* Not compatible with Macs using Intel processors.
* Application using the terminal to execute shell scripts will need a
  confirmation before scripts will execute.
* Localizations are used only for languages supported by Terminal.

Acknowledgments
===============

Thanks to `Joan Carles "Vei" Tasies`_ for the Catalan and Spanish
localization and to Raymond for the French localization.

.. _`Joan Carles "Vei" Tasies`: http://homepage.mac.com/vei


Legal
=====

::

    Copyright � 2006 Nir Soffer
    License: GNU General Public License, see COPYING