topic Re: How to restrict a user from perform "cd" command on RedHat in Operating System - Linux

How to restrict a user from perform "cd" command on RedHat

Roberto Espinoza Sánche — Wed, 19 Jul 2006 10:06:44 GMT

Customer is trying to restrict a determined user to move from the /home directory, if the bash -r line is added to the .bash_profile it works, however if the user types "exit" once, it returns to the normal bash shell with no restrictions,any suggestion?

Re: How to restrict a user from perform "cd" command on RedHat

Ivan Ferreira — Wed, 19 Jul 2006 10:28:38 GMT

Two options:

1- Add an exit below the bash -r in the profile.

bash -r
exit

So, when the user type exit, exit is runned again. But this is not good if you put in the .bash_profile, because the users have control over this file and can be changed.

2- Recommended

Create a symbolic link to the bash file and name it rbash, configure the user to use this file as shell:

cd /etc/security
ln -s /bin/bash rbash
usermod -s /etc/security/rbash username

Re: How to restrict a user from perform "cd" command on RedHat

Roberto Espinoza Sánche — Wed, 19 Jul 2006 11:02:24 GMT

It works !!! i tried both options and they worked, thanks a lot for your help :-)
Regards.

Re: How to restrict a user from perform "cd" command on RedHat

Ivan Ferreira — Wed, 19 Jul 2006 11:32:24 GMT

Good, please see also:

http://forums1.itrc.hp.com/service/forums/helptips.do?#28

Take a little time to assign points to your questions, this is a good way to thank in the forum:

http://forums1.itrc.hp.com/service/forums/pageList.do?userId=CA640287&listType=question&forumId=1

Re: How to restrict a user from perform "cd" command on RedHat

Steven E. Protter — Wed, 19 Jul 2006 11:35:55 GMT

Roberto,

Please say thanks to Ivan with points.

Please read this:
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=140137

SEP