Re:iOS Privacy: Easily get a user's Apple ID password, just ...
by seiferteric on Tuesday October 10, 2017 @04:06PM
(#15444930)
Isn't the login shell set in /etc/passwd? So you would need root to either modify that, or to overwrite the shell binary.
If the attacker was able to backdoor the system, isn't also possible they could install a modified shell that no-ops \?