Giving users a perl script as remote shell

[j0nb]

Hello. I am interested in allowing people to ssh into my box in order to interact with a perl script I've written (to solve suduku puzzles), and I'm wondering what the security risks of an arrangement like this might be. I don't want these users to have a standard bash shell or any interaction with the computer beyond the perl script.

I tested this out a while back with specifying the script as the user's shell in /etc/passwd just to see if that was possible, but I really have no idea about the security issues of an arrangement like this.

Thanks for any help,
jb

[likwid]

Well I guess you'll have to make sure your input is thoroughly checked, otherwise theoretically someone could use perl to exec("/bin/bash"); or something similar. Biggest security risk with things like this is input checking.