How to disable chmod/chown

[Satish Y]

Hi,

In HP-UX by default any user can do chmod/chown on his own files. Is there any way to restrict the user, so he cannot do chmod/chown on his own files also?.

Cheers...
Satish.

[Juha Eklund]

Hi,
I dont think so because normal user can chance only hir/her own files and taking possibility do so there arent any possibilities left ?!?! Of course You can make a wrapper ( in shell/perl/C/ whateverhis) where You can make more restrictions than the normal command ..

Can You tell more what You have in mind ..

-- Juha --

[James R. Ferguson]

Hi:

A "brutal" approach would be to setup the user as one with a restricted shell and place the commands you want him/her to have in /usr/rbin. See the man pages for 'sh-posix'.

Remember, that files are created without their executable bit set. Thus without the ability to 'chmod' a file, your hypothetical user could never create and then execute a script.

Perhaps this is your goal. If so, I would consider creating a menu-based script which would substitute for a shell in the first place. If you specify your menu script in lieu of the shell in the shell field of /etc/passwd, then your menu will automatically run at login; and unless you provide a specify "shell-out" command, the user will be unable to exit to a shell.

Regards!

...JRF...

[eran maor]

Hi

i will try to use the restrict shell for this users .

and toy can also try to use sudo ( but i didnt ever use it ) to try to restrict the user from using command .

you can download it from and see sone info

giving you the web site

http://www.courtesan.com/sudo/man/sudo.html

http://www.rge.com/pub/admin/sudo/ - also to download other version

http://www.nscp.umd.edu/sudo.html - commands

http://www.komar.org/komar/alek/pres/sudo/