The Operator Shell: A means of privilege distribution under Unix
Michael C. Neuman, Gary G. Christoph · University of North Texas Digital Library (University of North Texas) · 1994
The Operator Shell (Osh) is a setuid root, security enhanced, restricted shell for providing fine-grain distribution of system privileges for a wide range of usages and requirements. Osh offers a marked improvement over other Unix privilege distribution systems in its ability to specify access to both commands and files, auditing features, and familiar interface. This paper describes the design, features, security considerations, internals, and applications of the Operator Shell.