topic Re: Restricted shell and read access in Operating System - HP-UX

Restricted shell and read access

pratham — Fri, 23 Feb 2007 08:00:22 GMT

How can i give user read access when that particular user has restricted shell?
User cannot do cd to that particular path

Re: Restricted shell and read access

Wouter Jagers — Fri, 23 Feb 2007 08:05:07 GMT

In order to be able to cd to a particular path, the user should have execute permission on the directory.

Cheers,
Wout

Re: Restricted shell and read access

Peter Godron — Fri, 23 Feb 2007 08:08:59 GMT

Hi,
either you copy the file for the user
or
re-create the cd command for the user, as (by JRF):
"The restricted shell environment presumes that the commands you want a user to be able to execute are available in his/her PATH. In particular, a user cannot specify a command with '/' at its beginning, 'cd' to a directory; nor can they set their PATH variable."
or
remove the user from the restricted shell into a 'normal' shell.

Please also read:
http://forums1.itrc.hp.com/service/forums/helptips.do?#33 on how to reward any useful answers given to your questions.

Re: Restricted shell and read access

Wouter Jagers — Fri, 23 Feb 2007 09:04:06 GMT

*cough* sorry.. restricted shell. Read/posted too speedily. My apologies.

Re: Restricted shell and read access

Bill Hassell — Fri, 23 Feb 2007 11:28:25 GMT

Restricted shell (ie, rksh or rsh) means that the user has a different / or root directory. When the user logs in, the restricted shell runs chroot (see man page) to change the user's root directory to their $HOME directory. Therefore, nothing outside of the $HOME directory is visible and therefore impossible to access.

That is one of the reasons the restricted shell is not used a lot -- it is too restrictive. The only workaround is to replace the user's shell with a script that has a menu. The menu limits the commands allowed for each user and prevents exiting to a shell prompt.

Re: Restricted shell and read access

John Kittel — Fri, 23 Feb 2007 12:02:02 GMT

It is not necessary to cd to a directory to be able to read a file there.

$ cd /tmp
rsh: cd: The operation is not allowed in a restricted shell.
$ ll /tmp/hello
-rw-rw-rw- 1 root sys 16 Feb 23 08:59 /tmp/hello
$ cat /tmp/hello
Hell, Oh World!
$