Fush is a Unix shell replacement. It provides
improved support for logging the user's commands.
Fush allows you to restrict and log everything
that a user does. You can restrict shell
operators, maximum command length, background
tasks, or limit which commands can be executed
from the command line. A list of MD5 sums is kept
on all system binaries. When a user tries to
execute a command, an MD5 hash is generated and is
compared against the user's ACL. If the MD5 sum
and full path match an approved command in the
ACL, the command is executed.
