[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Limiting User Commands



Michael Graham wrote:
Ben Hutchings wrote:

Christopher Swingley wrote:

Change the ownership and permissions on their .bash_profile and .bashrc
to root:root 644:

   -rw-r--r--    1 root     root          420 Sep 21 13:05
   .bash_profile -rw-r--r--    1 root     root          746 Sep 21
   13:05 .bashrc

You should also add the sticky bit to their directory (chmod +t) to
prevent them from replacing these files.


I feel the need to learn something new today. How could the user replace
the root owned files in a directory that they own?

By renaming or unlinking them. Linux treats this as an operation on the directory, not the file, so it's controlled by the directory's permissions.

Ben.



Reply to: