topic Re: Restricting Access in Operating System - HP-UX

Restricting Access

Anthony_69 — Tue, 10 Jun 2003 08:36:11 GMT

Hi all....
this is my first post here so please ignore me if i'm being a bit thick!
I was just wondering if when setting up a new user, is it possible to restrict access for that user to just one directory. eg: when this user logs in, it takes them directly to /tmp and they are not allowed to move from that directory? Thanks in advance.....

Re: Restricting Access

Stefan Farrelly — Tue, 10 Jun 2003 08:44:01 GMT

Yes, you need to use restricted shell. This stops the user using the cd command to change dir out of the one they log into.

See man sh (and look at the rsh section)

Re: Restricting Access

Ian Dennison_1 — Tue, 10 Jun 2003 08:45:11 GMT

Restricted Shell

/usr/bin/rsh
/usr/bin/rksh

Lock them into their own home directory though! /tmp has different style of permissions set.

Share and Enjoy! Ian

Re: Restricting Access

V.Tamilvanan — Tue, 10 Jun 2003 08:50:28 GMT

Hi,
Yes. You can do this by assigning restricted shell as default shell.
You can do this when u r creating user by using sam. Or edit /etc/passwd and change the last field which is the default shell.

Ex:-

weblogic:ZeGnatv/lC1z.:106:20:Weblogic test acc,,,:/tmp:/usr/bin/rksh

HTH

Re: Restricting Access

Anthony_69 — Tue, 10 Jun 2003 08:56:01 GMT

thanks guys. when i assign this user the rsh, where do I specify the locked directory?

Re: Restricting Access

V. V. Ravi Kumar_1 — Tue, 10 Jun 2003 09:06:20 GMT

Hi,
u can use restricted shell like rsh or rksh.

Regards

Re: Restricting Access

Ian Dennison_1 — Tue, 10 Jun 2003 09:09:03 GMT

The locked directory should be their home directory.

Cheers, Ian

Re: Restricting Access

Pete Randall — Tue, 10 Jun 2003 09:15:39 GMT

You specify their home directory, which is the one they are restricted to, in the /etc/passwd entry for the user. Typically this would be /home/username, but I guess you could make it /tmp if you really wanted.

Pete

Re: Restricting Access

Anthony_69 — Tue, 10 Jun 2003 09:24:23 GMT

cheers guys. much appreciated