[Webinar] Streamline your web hosting managementRegister Today

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 362
  • Last Modified:

denying telnet to a particular user

ok i need to stop a user from telneting a system on which it has a valid account and just allow him ftp and no other servives should be effected. The system is ultra 60 with solaris 7 installed. I cannot use the option of making the user shell as /bin/false because it stops both telnet and ftp and if i create an /etc/shells file then i have to put in all the valid shells which somehow my customer does not want to do!!


regards
Naufal
0
naufal
Asked:
naufal
1 Solution
 
liddlerCommented:
Naufal,
/bin/false & /etc/shells is the best way to do it.
Another possiblilty is to use setfacl to remove the execute and / or read bit for that specific user to their shell or another executealbe telnet needs but ftp doesn't.

so if user_1 uses the ksh
setfacl -m user:user_1:r-- /usr/bin/ksh

0
 
naufalAuthor Commented:
yeah man that works thanks a lot

regards
Naufal
0

Featured Post

[Webinar] Kill tickets & tabs using PowerShell

Are you tired of cycling through the same browser tabs everyday to close the same repetitive tickets? In this webinar JumpCloud will show how you can leverage RESTful APIs to build your own PowerShell modules to kill tickets & tabs using the PowerShell command Invoke-RestMethod.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now