Userid and group to have read access only.

[Ragni Singh]

Hello,

I have created a user nmlread, group nmlread, but I need both user and group to only have read access. What needs to be done?

drwx------ 3 nmlread nmlread 4096 Feb 28 11:06 nmlread

Thanks and points will be assigned.

[Ivan Krastev]

Use chmod command:

chmod ug+r filename
or
chmod 440 filename

see http://en.wikipedia.org/wiki/Chmod

for more examples.

regards,
ivan

[Ivan Ferreira]

Hi. Read only access to what? To files, directories, all system?

You can use rbash to limit what the user can do.

[Ragni Singh]

Hi Ivan, I would think the user nmlread should only have read access to everything on the system.

[Ivan Ferreira · Accepted solution]

Then, you need restricted bash.

How to configure:

Create a link for bash:

# ln -s /bin/bash /bin/rbash

Set the user's shell rbash

# usermod -s /bin/bash username

Create a the $HOME/bin directory for the user:

# mkdir /home/username/bin

Link the commands that you want to allow to the user in the bin directory:

# cd /home/username/bin
# ln -s /bin/ls
# ln -s /bin/date
# ln -s /bin/cat

Edit the user .bash_profile and set the PATH variable to contain only the $HOME/bin directory:

# vi /home/username/.bash_profile

PATH=$HOME/bin
export PATH

The user can only run the commands in his bin directory.

[Ragni Singh]

Thanks, that helped. POints have been assigned.