Restrict user

[hangyu]

I want to control a user can only access a specific directory eg. /tmp and /home , and can't access the other directory even the general directory eg. /usr , /var , what can I do ? I tried ibsh , but this method allow user access HOME directory ONLY , if I want the user can access a list of specific directory , what can i do ? thx

[g33k · Accepted solution]

well it dependes how specific you would like to be...

in general groups are OK, but it's not much scalable....

Other possibility is SELinux which gives you more options to set roles of the user.

Access-List are also good solution.

But all of this is quitte "huge" to cover it in my respons so try to google a bit and select what is best way for you.

[Jaydeb Chakraborty]

only read access with absolute path:-

# adduser
# ln -s /bin/bash /bin/rbash
# chsh -s /bin/rbash luser
# cd /home/
#ln -s /tmp tmp
#ln -s /home home
#passwd

Or change the user path and specify a separate bin directory. Put those command only you want to let him/her execute. Change the attribute of ~.bash_profile /~.bashrc as a root.

Thanks!

[melvyn burnard]

you have already posted this question in the HP-UX forum, please refer to that thread:
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=1061978