topic Re: Restricted user access. in Operating System - HP-UX

Restricted user access.

vinuhcl — Thu, 28 May 2009 04:17:46 GMT

Hi,
I have created a restricted user on my 11.11 server. Currently this user cannot wander around to any directory other than his home directory.Now, I need to set up the user rights in such a way that this user can go to the sub directories inside his home directory. Kinldy let me know if any one can help me out on this....
Thanks in advance,
Vinu

Re: Restricted user access.

avizen9 — Thu, 28 May 2009 04:32:59 GMT

"this user can go to sub directories inside his home directory"

how about create sub directory and change owner to this user,

Re: Restricted user access.

vinuhcl — Thu, 28 May 2009 04:40:41 GMT

Hi Avizen,
Your quick response is highlreciated. The user cannot go inside the subdirctories. Please see the below outputs;
$ whoami
testuser
$ pwd
/home/testuser
$ mkdir hp-india
$ ll -d hp-india
drwxrwxrwx 2 testuser users 96 May 28 07:39 hp-india
$ cd hp-india
rsh: cd: The operation is not allowed in a restricted shell.

Re: Restricted user access.

johnsonpk — Thu, 28 May 2009 05:03:16 GMT

Hi Vinu,

cd is not permitted in restricted shell ,

but you can perform certain things from outside of that subdir like

touch subdir/test
cat subdir/test

the followings are not possible in restricted shell
Redirecting output
Specifying pathnames or command names containing a slash (/).

Setting the value of the PATH or the SHELL variables.
moving around directory using cd command

Thanks!!
Johnson

Re: Restricted user access.

avizen9 — Thu, 28 May 2009 05:03:34 GMT

Hello,
what method you use to create this restriced user,
why dont you try with sudo? thanks,

Re: Restricted user access.

vinuhcl — Thu, 28 May 2009 05:23:22 GMT

Hi Avizen,
How I created the user is through SAM and set the shell as /usr/bin/rsh. Could you please tell me how can I limit the cd usage of a user such a way that he can do cd to his home directories and to the subditrectories inside his home directory ( I can change the shell to a normall shell other than rsh)

Re: Restricted user access.

Dennis Handly — Thu, 28 May 2009 05:27:22 GMT

>rsh: cd: The operation is not allowed in a restricted shell.

That's what the man page says:
The cd command cannot be executed by rksh.
Or: rsh Restrictions
http://docs.hp.com/en/B2355-60130/sh-posix.1.html#d0e220003

Re: Restricted user access.

vinuhcl — Thu, 28 May 2009 06:53:43 GMT

Can we set a user's privilage in sudo such a way that he can do cd to only his home direcotory and to it's child directories??

Re: Restricted user access.

Kenan Erdey — Thu, 28 May 2009 07:01:07 GMT

Hi,

no, sudo can't cd to unprivileged directory.

Re: Restricted user access.

johnsonpk — Thu, 28 May 2009 07:08:18 GMT

Hi Vinu
Yes you can do that ..
#visudo
then create rule like below

userabc ALL=(ALL) NOPASSWD:/usr/bin/cd /home/userabc*

if you know the subdirectory ..u can specify that in the sudoers file separated by " ,"

eg:userabc ALL=(ALL) NOPASSWD:/usr/bin/cd /home/userabc*,/usr/bin/cd childdir

save and exit

and for moving across his directories

use sudo cd /home/userabc/

Thanks!!
Johnson

Re: Restricted user access.

avizen9 — Thu, 28 May 2009 07:12:57 GMT

Hello Vinu,
first you should verify sudo is installed in your hpux box with below command,

swlist -l product | grep -i sudo

if dont have sudo installed you can install it through below,

http://www.sudo.ws/sudo/dist/binaries/