topic Re: Captive user account in Operating System - HP-UX

Captive user account

Leonard Gallatin — Thu, 31 Oct 2002 22:50:37 GMT

I need to create a captive user account.
I'm looking for any information on how to create this account. The user must not be able to move from their home directory.

Re: Captive user account

A. Clay Stephenson — Thu, 31 Oct 2002 23:03:19 GMT

Just create the user in the usual way using SAM if you like but make the shell /usr/bin/rsh. This is the restricted version of the POSIX sh and will not allow a cd. Man sh_posix for details and look for rsh.

Re: Captive user account

Michael Tully — Thu, 31 Oct 2002 23:04:22 GMT

Make the users shell profile as /usr/bin/rksh or /usr/bin/rsh

This will restrict the user to their own home directory.

HTH
Michael

Re: Captive user account

Bill Hassell — Fri, 01 Nov 2002 00:39:44 GMT

Just a note: this is called a chroot jail. They cannot move up (cd is disabled). Commands like ls and ll are not permitted. The restricted shells (rsh, rksh, rcsh) are so restricted that it may be simpler to replace the shell with a simple menu program. Check the man pages for rsh and rksh.