[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Restrict a user to a set of binaries?



Raffaele Morelli wrote:
> Jon Dowland wrote:
> > Raffaele Morelli wrote:
> > > You can remove /bin/ and/or /usr/local/bin from his PATH by changing its
> > > /home/user/.profile
> >
> > They could just add it back, though. This doesn't offer any serious
> > protection.
> 
> Of course, but then
> chown root:user .profile
> chmod 644 .profile

That won't stop a user from doing this on the command line:

  PATH=/usr/local/bin:/usr/bin:/bin:$PATH

Just type it in.

Bob

Attachment: signature.asc
Description: Digital signature


Reply to: