Safe Terminal

Version 0.2

What is Safe Terminal?

Safe Terminal fixes a security weakness with Mac OS X Terminal utility, when it execute shell scripts without the user permission.

If Safari "Open safe files after download" is enabled, its possible to create malicious shell scripts that will be executed by the Terminal automatically after you download them. It is also possible to create malicious shell scripts that look like a document or a folder, that will be executed by Terminal on double click without warning.

After Safe Terminal is installed, the Terminal utility will not execute any file, even if "Open safe files after download" option in Safari is enabled. However, the usage of the Terminal to type and run commands is not effected in any way.

What's new in this version

• Improved documentation
• Includes a test script to verify the installation

Install

1. Log in as an administrator.
2. Copy the folder named "Safe Terminal" in the disk image into InputManagers folder inside the Library folder in the volume Mac OS X is installed. If the InputManagers folder does not exists, create it.
3. If the Terminal is running, restart it.

If you are not allowed to administer this computer, or want to install only for your account, you may install into the InputManagers folder inside the Library folder inside your home folder.

To verify the installation, try to double click the file named "test.command" in the disk image. You should hear a beep and the file will not run. Without Safe Terminal a new shell window will open, and the computer will warn you about evil scripts.

Uninstall

1. If you installed as administrator, you have to login as one.
2. Delete Safe Terminal folder from the InputManagers folder.
3. If the Terminal is running, restart it.

How to execute safe shell scripts

Safe Terminal will not execute shell scripts, .command and .term files by double clicking or using the File>Open menu in the Finder. I believe that it is not safe enough for most users to open these files from the Finder, because the Finder will not warn you about shell scripts you never run, like it does for unknown applications.

To execute safe shell scripts in the Terminal, choose File>Open menu or Command + O in the Terminal itself, and select the file.

Known Issues

• Safe Terminal will not execute shell scripts that other application ask the Terminal to execute. This might break software that use this feature of the Terminal.
• When opening Terminal.app, a new shell window is not opened. To create a new shell window, choose File>New menu or press Command + N.

Legal

Copyright © 2006 Nir Soffer

License: GNU General Public License, see COPYING