?
Solved

denying telnet to a particular user

Posted on 2004-03-30
2
Medium Priority
?
357 Views
Last Modified: 2013-12-27
ok i need to stop a user from telneting a system on which it has a valid account and just allow him ftp and no other servives should be effected. The system is ultra 60 with solaris 7 installed. I cannot use the option of making the user shell as /bin/false because it stops both telnet and ftp and if i create an /etc/shells file then i have to put in all the valid shells which somehow my customer does not want to do!!


regards
Naufal
0
Comment
Question by:naufal
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 18

Accepted Solution

by:
liddler earned 500 total points
ID: 10713868
Naufal,
/bin/false & /etc/shells is the best way to do it.
Another possiblilty is to use setfacl to remove the execute and / or read bit for that specific user to their shell or another executealbe telnet needs but ftp doesn't.

so if user_1 uses the ksh
setfacl -m user:user_1:r-- /usr/bin/ksh

0
 

Author Comment

by:naufal
ID: 10721664
yeah man that works thanks a lot

regards
Naufal
0

Featured Post

Get real performance insights from real users

Key features:
- Total Pages Views and Load times
- Top Pages Viewed and Load Times
- Real Time Site Page Build Performance
- Users’ Browser and Platform Performance
- Geographic User Breakdown
- And more

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

My previous tech tip, Installing the Solaris OS From the Flash Archive On a Tape (http://www.experts-exchange.com/articles/OS/Unix/Solaris/Installing-the-Solaris-OS-From-the-Flash-Archive-on-a-Tape.html), discussed installing the Solaris Operating S…
Java performance on Solaris - Managing CPUs There are various resource controls in operating system which directly/indirectly influence the performance of application. one of the most important resource controls is "CPU".   In a multithreaded…
Learn how to navigate the file tree with the shell. Use pwd to print the current working directory: Use ls to list a directory's contents: Use cd to change to a new directory: Use wildcards instead of typing out long directory names: Use ../ to move…
In a previous video, we went over how to export a DynamoDB table into Amazon S3.  In this video, we show how to load the export from S3 into a DynamoDB table.
Suggested Courses
Course of the Month10 days, 14 hours left to enroll

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question