topic Restricted Login in Operating System - HP-UX

Restricted Login

MARCONI SPA — Tue, 14 May 2002 08:06:57 GMT

I have need to only qualify the telnet of a customer to the own HOME and below directory. They are not successful to find documentation with regard to, for which I wanted to know if the thing were feasible and eventually as. Thanks in advanced

Re: Restricted Login

David Burgess — Tue, 14 May 2002 08:14:36 GMT

A restricted shell may help. It will keep the user in one directory.
Perhaps change the users group id to a uniq one that can't read anything, but their own files.

HTH,

Dave.

Re: Restricted Login

John Carr_2 — Tue, 14 May 2002 08:14:37 GMT

Hi

this thread expains all.

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x59c9c8ecad09d6118ff40090279cd0f9,00.html

cheers
John

Re: Restricted Login

steven Burgess_2 — Tue, 14 May 2002 08:16:49 GMT

Hi

You need to give the user a restricted shell /usr/bin/rsh

via

useradd -m -s /usr/bin/rsh < user >

It gives

1. A user can't change dirs
2. Can't set env variables
3. Can't execute programs
4 I/O redirection is disabled

Have a look at man useradd for more info

Regards

Steve

Re: Restricted Login

Niraj Kumar Verma — Tue, 14 May 2002 08:33:52 GMT

Hi,

I agree with steven

do use rsh as login shell.

-Niraj

Re: Restricted Login

MARCONI SPA — Tue, 14 May 2002 08:47:23 GMT

Hi,

I dont'agree.
Is impossible to use rsh (or rksh) why this shell disable cd.
In my question i need do use $HOME and BELOW directory $HOME/1 $HOME/pppppdd etc.

Thanks.

Re: Restricted Login

David Burgess — Tue, 14 May 2002 08:51:52 GMT

I don't think even chroot will help you.
I'm not sure it can be achieved.

Regards,

Dave.

Re: Restricted Login

Deepak Extross — Tue, 14 May 2002 09:48:05 GMT

I guess you'll have to rely on tight Unix permissions to do this - Create a new group and userid for this guy and make sure all other users/groups do not give access to "others" on any of their files/directories.
Of course your user will still be able to access places like /tmp which allow access to "others".

Re: Restricted Login

Geetha Alagappan — Wed, 15 May 2002 14:30:09 GMT

Please take a look at this thread...

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x42647bb04b5cd611abdb0090277a778c,00.html

Re: Restricted Login

Bill Hassell — Wed, 15 May 2002 15:13:09 GMT

The only secure way to do this is to replace the shell with a menu program (note: program, not a shell script). If they are to be restricted to their own $HOME, they likely do not need all the shell and HP-UX commands, so let the menu handle their needs. Note tha programs like vi have an escape to a shell so make sure that if the menu program allows vi, that the variable SHELL=/usr/bin/false has been set in the environment.