Creating subusers & assigning limited rights

xs2sandeep · #1 06-06-2006

Hi all,

I need to create 2 users sde1 & sde2 with limited authority(only for read). I know the root password.Pls tell me step by step procedure how to create these subusers to root.

the commands which these subusers can run are :

1)#df -k
2)#ps -ef|grep syb
3)#ps -ef|grep omc
4)ps -eofname,pcpu,comm|sort -k 2n

-Sandy

grial · #2 06-06-2006

I think what you want is a procedure to configure a chroot jail for those users, don't you?... That's not a trivial procedure. There a re lots of docs on that, just go to google

Corona688 · #3 06-06-2006

Quote:

Originally Posted by xs2sandeep

Hi all,

I need to create 2 users sde1 & sde2 with limited authority(only for read).

for read, on what? In what system?

Quote:

I know the root password.Pls tell me step by step procedure how to create these subusers to root.

subuser? What's a subuser, a non-root user?

Quote:

the commands which these subusers can run are :

1)#df -k
2)#ps -ef|grep syb
3)#ps -ef|grep omc
4)ps -eofname,pcpu,comm|sort -k 2n

-Sandy

That's...pretty limited. UNIX doesn't support this sort of thing directly as in a "let user x access only these programs" list, though it's possible to create that environment.

If you have bash, you can put their login shell into restricted mode, which would prevent them from doing...nearly anything. A chroot jail would be a more ironclad solution, but the bash one is very simple...

The way I went about this was:

Create a directory, /opt/lubin, which contains symlinks to ONLY the commands you want. It should look like this:

Code:

mecgentoo ~ # ls -lh /opt/lubin
total 0
lrwxrwxrwx 1 root root 7 Jun  6 08:47 df -> /bin/df
lrwxrwxrwx 1 root root 9 Jun  6 08:47 grep -> /bin/grep
lrwxrwxrwx 1 root root 7 Jun  6 08:47 ps -> /bin/ps
lrwxrwxrwx 1 root root 9 Jun  6 08:47 sort -> /bin/sort

grial · #4 06-06-2006

Well, a restricted shell is a much easyer solution... It just depends on the limits you want for those users...
On a restricted shell you sould be careful with the PATH variable and the user's profile files.
Regards.

Corona688 · #5 06-06-2006

Quote:

Originally Posted by grial

Well, a restricted shell is a much easyer solution... It just depends on the limits you want for those users...
On a restricted shell you sould be careful with the PATH variable and the user's profile files.
Regards.

Absolutely. With a session that limited they don't even need a writable home directory!

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

More UNIX and Linux Forum Topics You Might Find Helpful
Thread	Thread Starter	Forum	Replies	Last Post
user with limited privileges	Juha	Solaris	1	03-17-2008 02:02 AM
FTP rights	Burhan	Solaris	2	03-15-2007 06:22 AM
Unix access rights	rudo	UNIX for Dummies Questions & Answers	1	02-26-2007 05:40 PM
User rights	sharmavr	HP-UX	1	07-25-2006 03:16 AM
Groups Rights	niasdad	UNIX Desktop for Dummies Questions & Answers	3	07-16-2002 09:01 AM


	Powered by