Restricted user access.

[vinuhcl]

Hi,
I have created a restricted user on my 11.11 server. Currently this user cannot wander around to any directory other than his home directory.Now, I need to set up the user rights in such a way that this user can go to the sub directories inside his home directory. Kinldy let me know if any one can help me out on this....
Thanks in advance,
Vinu

[avizen9]

"this user can go to sub directories inside his home directory"

how about create sub directory and change owner to this user,

[vinuhcl]

Hi Avizen,
Your quick response is highlreciated. The user cannot go inside the subdirctories. Please see the below outputs;
$ whoami
testuser
$ pwd
/home/testuser
$ mkdir hp-india
$ ll -d hp-india
drwxrwxrwx 2 testuser users 96 May 28 07:39 hp-india
$ cd hp-india
rsh: cd: The operation is not allowed in a restricted shell.

[johnsonpk]

Hi Vinu,

cd is not permitted in restricted shell ,

but you can perform certain things from outside of that subdir like

touch subdir/test
cat subdir/test


the followings are not possible in restricted shell
Redirecting output
Specifying pathnames or command names containing a slash (/).

Setting the value of the PATH or the SHELL variables.
moving around directory using cd command


Thanks!!
Johnson

[avizen9]

Hello,
what method you use to create this restriced user,
why dont you try with sudo? thanks,

[vinuhcl]

Hi Avizen,
How I created the user is through SAM and set the shell as /usr/bin/rsh. Could you please tell me how can I limit the cd usage of a user such a way that he can do cd to his home directories and to the subditrectories inside his home directory ( I can change the shell to a normall shell other than rsh)

[Dennis Handly]

>rsh: cd: The operation is not allowed in a restricted shell.

That's what the man page says:
The cd command cannot be executed by rksh.
Or: rsh Restrictions
http://docs.hp.com/en/B2355-60130/sh-posix.1.html#d0e220003

[vinuhcl]

Can we set a user's privilage in sudo such a way that he can do cd to only his home direcotory and to it's child directories??

[Kenan Erdey]

Hi,

no, sudo can't cd to unprivileged directory.

[johnsonpk]

Hi Vinu
Yes you can do that ..
#visudo
then create rule like below

userabc ALL=(ALL) NOPASSWD:/usr/bin/cd /home/userabc*

if you know the subdirectory ..u can specify that in the sudoers file separated by " ,"

eg:userabc ALL=(ALL) NOPASSWD:/usr/bin/cd /home/userabc*,/usr/bin/cd childdir




save and exit


and for moving across his directories

use sudo cd /home/userabc/

Thanks!!
Johnson