The user could empty the authorized_keys and break the login of the website, change the shell configuration to break the prompt, and write startup files that zsh reads on every login. The shell configuration and the key are now read-only for the user, and the shell reads its configuration from ~/.zsh, so the files in the home directory are ignored. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
7 lines
434 B
Shell
7 lines
434 B
Shell
# Preset what MSYS2's /etc/profile would otherwise start a helper process for (~90 ms each here).
|
|
# TZ has to match the Windows timezone (W. Europe Standard Time).
|
|
export LANG=en_US.UTF-8 TZ=Europe/Berlin
|
|
|
|
# The shell reads its configuration from here, not from the home directory: the user may not change it, and the
|
|
# files in the home directory that zsh would read otherwise (.zprofile, .zlogin) are ignored.
|
|
export ZDOTDIR=~/.zsh
|