Linux Help
guides forums blogs
Home Desktops Distributions ISO Images Logos Newbies Reviews Software Support & Resources Linuxhelp Wiki

Welcome Guest ( Log In | Register )



Advanced DNS Management
New ZoneEdit. New Managment.

FREE DNS Is Back

Sign Up Now
 
Reply to this topicStart new topic
> Disabling Commands, How can i disable commands for users
Beethovan
post Feb 22 2004, 09:54 PM
Post #1


Whats this Lie-nix Thing?
*

Group: Members
Posts: 5
Joined: 11-February 04
Member No.: 2,351



I'm using a SSH server to authenticate users, and i've set the shell to rbash so that they cant browse around, but is there a way to disable commands such as Finger and ping and others so that when these limited users access the machine they cant use those commands? any info would be greatly appreciated.

Thomas
Go to the top of the page
 
+Quote Post
jetblackz
post Feb 23 2004, 11:30 AM
Post #2


./configure
***

Group: Members
Posts: 98
Joined: 1-April 03
Member No.: 613



It can be easily accomplished with sudo.

man sudo

for details.


--------------------
Go to the top of the page
 
+Quote Post
jetblackz
post Feb 23 2004, 11:33 AM
Post #3


./configure
***

Group: Members
Posts: 98
Joined: 1-April 03
Member No.: 613



Then add aliases to all questionable commands in your /etc/profile, i.e.:

alias ftp='sudo ftp'

so that the commands must be run with sudo.


--------------------
Go to the top of the page
 
+Quote Post
hughesjr
post Feb 23 2004, 06:51 PM
Post #4


Its GNU/Linuxhelp.net
*******

Group: Admin
Posts: 3,433
Joined: 25-July 03
From: Corpus Chrsiti, TX, USA
Member No.: 1,151



you could also change the group ownership of the files in question with chgrp (to a group that you can put trusted users in) ... (ie make a group called trusted and put all the trusted users in there) ...

then:

chgrp trusted filename

then

chmod 750 filename

HOWEVER, it looks to me like they can't change their PATH ... and they can't run commands with a / in it ...

so if you restrict their path to /usr/local/bin and only link in the executables you want there, you should be OK.


--------------------
Johnny Hughes
hughesjr@linuxhelp.net
Enterprise Alternatives: CentOS, WhiteBoxEL
Favorite Workstation Distros (in order): CentOS, Gentoo, Debian Sarge, Ubuntu, Mandrake, FedoraCore, Slackware, SUSE
Favorite Server Distros (in order): CentOS, WhiteBoxEL, Debian Sarge, Slackware, Mandrake, FedoraCore, Gentoo, SUSE
Go to the top of the page
 
+Quote Post

Reply to this topicStart new topic
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:

 



RSS Lo-Fi Version Time is now: 23rd October 2017 - 01:21 AM