topic Re: Restricted User Access in Operating System - HP-UX

Restricted User Access

KPS — Wed, 23 Jun 2004 10:17:45 GMT

Hi,

I have a user on my system that I would only like to restrict access to certain select directories and subdirectories. Is there a way I can do this through ACL or something or is this even possible?

Any help would be greatly appreciated..

Thx,
-Ken

Re: Restricted User Access

RAC_1 — Wed, 23 Jun 2004 10:26:37 GMT

Yes. You can do that.

Depending on what type of file systems you have you would be using following commands to give access.

lsacl/chacl -- HFS
getacl/setacl -- VxFS

On VxFS, the version 4 supports acl. so you need to have that version. You can try setting it and if you get error as not supported, then the VxFS that you have does not support it.

man lsacl/chacl, getacl/setacl

Anil

Re: Restricted User Access

Steven E. Protter — Wed, 23 Jun 2004 10:28:45 GMT

Idea suggestion:

chroot

This would make his home directory his root. Then the user would not be able to access anything above that. A strategically placed home directory would only let the user see certain directories.

If impractical:
make a special group for that user.
put the user in that group
use permissions on the folder to prevent access by other.

directory /schmobagel will be inaccessible to this user if permissions were 770 on it.

This assumes the errant user isn't root.

Nothing can stop root.

SEP