topic Re: Sudo to restrict command execution in Operating System - HP-UX

Sudo to restrict command execution

Ajin_1 — Tue, 28 Jan 2014 21:19:26 GMT

Hi Experts ,

Thanks in advance

My requirement is i want to restrict users to executing commands.

I have 25 users in this server ,the requirement was that will execute only the list of commands (50 commands) ,and restrictall the commands.

Is this achived by sudo or from OS level any other options there.

Re: Sudo to restrict command execution

Matti_Kurkela — Wed, 29 Jan 2014 15:44:02 GMT

Sudo is a good tool for allowing the users to execute some sets of commands as some other user.

But if you want to restrict the commands available for the users with their normal user accounts, you will need a restricted shell.

See "man sh-posix" on a HP-UX and read the paragraph titled "rsh Restrictions", or see "man ksh" and read the paragraph titled "rksh Only" for restricted ksh shell.

Basically:

make copies of all the allowed commands, and place them to some directory (e.g. /usr/rbin)
configure the /etc/profile or the ~/.profile of the restricted users so that only that directory will be in their PATH
change the shell of the restricted users to /usr/bin/rsh or /usr/bin/rksh.

Re: Sudo to restrict command execution

Ajin_1 — Thu, 30 Jan 2014 04:30:45 GMT

Hi MK ,

Thank you very much.

Really appriciate you.