topic Restrict user in Operating System - Linux

Restrict user

hangyu — Thu, 21 Sep 2006 10:04:30 GMT

I want to control a user can only access a specific directory eg. /tmp and /home , and can't access the other directory even the general directory eg. /usr , /var , what can I do ? I tried ibsh , but this method allow user access HOME directory ONLY , if I want the user can access a list of specific directory , what can i do ? thx

Re: Restrict user

g33k — Thu, 21 Sep 2006 10:17:17 GMT

well it dependes how specific you would like to be...

in general groups are OK, but it's not much scalable....

Other possibility is SELinux which gives you more options to set roles of the user.

Access-List are also good solution.

But all of this is quitte "huge" to cover it in my respons so try to google a bit and select what is best way for you.

Re: Restrict user

Jaydeb Chakraborty — Thu, 21 Sep 2006 12:09:42 GMT

only read access with absolute path:-

# adduser
# ln -s /bin/bash /bin/rbash
# chsh -s /bin/rbash luser
# cd /home/
#ln -s /tmp tmp
#ln -s /home home
#passwd

Or change the user path and specify a separate bin directory. Put those command only you want to let him/her execute. Change the attribute of ~.bash_profile /~.bashrc as a root.

Thanks!

Re: Restrict user

melvyn burnard — Thu, 21 Sep 2006 12:41:30 GMT

you have already posted this question in the HP-UX forum, please refer to that thread:
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=1061978