• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 216
  • Last Modified:

restricting permissions to the user's

i have several users to my server, i want that the users should be only and only be confined to there home's i.e $USER/HOME" any command for out of their home should result in an access denied message. i hade done it but how i have forgotten.
i do not want to explicitly give permissions to other directories in my "/". but to chage the user's access for all users at a time.
0
tiwari
Asked:
tiwari
1 Solution
 
pksundarCommented:
1.Give the user restricted shell(rbash)
2.do not give execute permission to cd command
0
 
tiwariAuthor Commented:
Sorry! it can't be accepted due to following reasons.

1.I don't want something like "rbash"
2) the "cd" is a tcl builtin command that cannot be disabled without recomliing so it is out of the question
thanks any way but could use some more ideas
0
 
barreroCommented:
Why don't use some kind of "special shell" you made, where you change the root (chroot)...
the new root could be in each users directory...
and to avoid multiplicity, the bin, lib, etc... could be slinks.

By this way, they just have access to their home... and the linked subdirs... nothing else...

0
[Webinar] Improve your customer journey

A positive customer journey is important in attracting and retaining business. To improve this experience, you can use Google Maps APIs to increase checkout conversions, boost user engagement, and optimize order fulfillment. Learn how in this webinar presented by Dito.

 
tiwariAuthor Commented:
Can I get any kind of help in Writting My own Small shell!!?????
0
 
barreroCommented:
There is a more or less full example in "Advnced Programming for the unix environnment" written by Richard Stevens.

It's easy, all you need, is to know how to use:  execv, signals... and of course chroot.... in the execv, after chroot, you execute the normal shell but this one will run on the limited space (a shell script may do the same, but I thik it;s more secure to use a compiled code...)

Marcel
0
 
fatalerror080298Commented:
What the hell kind of answer is that?  If he wanted to buy a book on it he would have.  If you know the answer why don't you explain how to do it?
0

Featured Post

Learn to develop an Android App

Want to increase your earning potential in 2018? Pad your resume with app building experience. Learn how with this hands-on course.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now