How do I restrict a specfic user to certain directory access ?

[Q4you]

Example : User X has a home dir /home/X

What is required to be done so that X can access only directories below /Y and /Z ?

- Q4U

[Karthik S S]

Do you mean that the user X should have access to the User Y and User Z's home directories?? (/home/Y and /home/Z)

You can consider using sudo for this. Or you can also use ACLs.

-Karthik S S

[Q4you]

Not the home directories of Y and Z. Any directories under /. Do you have any specfic example ? TIA

[Michael Tully]

Have a look here:

http://docs.hp.com/hpux/onlinedocs/B2355-90742/B2355-90742.html
and
http://www.docs.hp.com/hpux/onlinedocs/os/jfs_acl.pdf

[Karthik S S]

SUDO:
http://www.courtesan.com/sudo/

You can define User and Command aliases.
Something like this (Not tested).

root ALL = (ALL) ALL
Host_Alias MYHP = 10.0.0.1
Cmnd_Alias CD = /usr/bin/cd /Y
Runas_Alias CD=root


I do not currently have a working configuration though. But I am sure it can be done.

-Karthik S S

[Karthikeyan_5]

Hi Michael Tully,

ACLs is possible in HP-UX 10.2......if so can u pls give me a simple step by step procedure.......i.e how to configure etc....

regards,
karthik

[Sunil Sharma_1]

Hi,
i think you can not use acl with HP UX 10.20 with jfs file system.
hfs you can use it.

you can use manual page of lsacl, chacl etc.


Sunil