- Community Home
- >
- Servers and Operating Systems
- >
- Operating Systems
- >
- Operating System - HP-UX
- >
- How to set up a Read Only user account in 11.11 UN...
Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Forums
Discussions
Discussions
Discussions
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-22-2007 04:33 AM
10-22-2007 04:33 AM
Dankeschoen
Solved! Go to Solution.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-22-2007 04:51 AM
10-22-2007 04:51 AM
Re: How to set up a Read Only user account in 11.11 UNIX
Bitte!
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-22-2007 05:03 AM
10-22-2007 05:03 AM
Re: How to set up a Read Only user account in 11.11 UNIX
How would the ACL work without changing the permissions of the existing files in that directory?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-22-2007 05:11 AM
10-22-2007 05:11 AM
SolutionI assume you mean 'remsh' (remote shell) instead of 'rsh' (restricted shell)?
If not, please correct me.
If you want to get a better security in setting up such a readonly account, drop the remsh support ang change to ssh.
What do you mean by 'using nfs'?
At first sight, there are two answers:
1) It is not possible to do this generally.
2) This is done automatically.
Thoughts to 1)
You can use /bin/false as login shell and set an invalid passwd entry for that user 'readonly'. No one exept root will be able to do a 'su readonly'.
Permitting to dive into NFS mount points will make it impossible to give that user account a shell /bin/false or even a restricted shell.
If you NFS mounts are not readonly, this account will have only special restrictions, when you map this UID to appropriate (non-)privilegs an every NFS server you have access to or you use NIS (e.g.).
Thoughts to 2)
Having a properly configured system with no world writable files, creating this account in a new/unused group will only permit modifying own files.
Setting the permission for $HOME recursivly to 550 for directories and 440 for files - though there may be side effects - will leave only /tmp as a problem.
mfG Peter
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-22-2007 05:16 AM
10-22-2007 05:16 AM
Re: How to set up a Read Only user account in 11.11 UNIX
I did mean no restricted shell and no /etc/exports involvement as I do not care for either one. Having said that, I am interested in th eACL portion of the responses
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-22-2007 10:13 PM
10-22-2007 10:13 PM
Re: How to set up a Read Only user account in 11.11 UNIX
using my solution 2) - user 'readonly' is in a group 'readonly' - you do not need ACLs anyway:
Even a permission of 775 (which is the less restricted one) like
drwxrwxr-x
where
Since it is generally very very recommended NOT having world writable files/directories, this shouldn't be a stopper.
mfG Peter
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-22-2007 11:41 PM
10-22-2007 11:41 PM