[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: limiting access



On Sun, Aug 20, 2000 at 10:14:01AM +0200, Robert Waldner wrote:
> 
> Hi!
> 
> (I´m quite sure that a pointer in the right direction/to the proper FM 
> is all I need.)
> 
> I have a bunch of luser-accounts on one of my boxes, what I want is to 
> restrict them to their home-dir, with only very special exceptions.
> 
> Any hints? iirc there is a way to set the root-dir to some other than /
> , but what´s the command/utility for that?

As suggested, the restricted shell.  Invoked with rbash or bash -r.

This doesn't allow changes to $PATH, users can't cd, and a number of
other restrictions exist.  You *have* to either point users to a system
directory with commands they can use, or create a commands directory for
them.  Unlike chroot, rbash allows references to files outside the
immediate directory tree, so you can create symlinks to other system
files, and you don't have to specially include libraries within the
user's environment.

rbash environments are often set up with a menu system rather than a
full command line.

-- 
Karsten M. Self <kmself@ix.netcom.com>     http://www.netcom.com/~kmself
 Evangelist, Opensales, Inc.                    http://www.opensales.org
  What part of "Gestalt" don't you understand?   Debian GNU/Linux rocks!
   http://gestalt-system.sourceforge.net/    K5: http://www.kuro5hin.org
GPG fingerprint: F932 8B25 5FDD 2528 D595 DC61 3847 889F 55F2 B9B0

Attachment: pgpjzhobRVo2v.pgp
Description: PGP signature


Reply to: