Henrik Erkkonen discovered that rssh, a restricted shell for SSH, does not properly restrict shell access.