08-29-2006
Can I prevent a user from changing the permissions on their home directory.
Hello All,
I have a new HPUX system going into production and it will be used by 2 projects. One of the contract requirements is the 2 groups can not have access to the others work or data. I believe I have the system pretty well locked up using groups and permissions and selective mounting of RAID partitions. However the one problem I see that I can not figure out:
Is it possible to prevent a user from changing the permissions on their home directory?
If I set the permissions at 750 the other group can not access the files. However if the user/owner decides to change them to anything more laxed, like 755, then the other group will have access to any proprietary data.
I realize that changing the permissions will most likely be a deliberate act, but I do have a couple of user that are rather lax in following the rules.
Thanks in advance for your responses.
Dan L.
10 More Discussions You Might Find Interesting
1. UNIX for Advanced & Expert Users
So I need to change the permissions of my user account. I can
access the root account on the server, but don't know how to
change the permissions of my user account. I was advised to
try 'userconf' to see if I am part of a group, but I dunno how that works. ANyone who knows how to see the... (3 Replies)
Discussion started by: achink125
3 Replies
2. UNIX for Dummies Questions & Answers
I accidently reset the permissions of my /home/punkrockguy318 directory to root only. How can I get my punkrockguy318 permissions ( and all of it's contents) to be read/write accesable only to punkrockguy318 and root? (5 Replies)
Discussion started by: punkrockguy318
5 Replies
3. UNIX for Dummies Questions & Answers
Hi everyone.
My objective is to configure a Solaris 10 box as follows: There will be many simultaneous users connecting to it, and each of those users would automatically get a home folder.
For example, when I add user "Bob", the home folder would be /export/home/Bob
And for Mary, it's... (3 Replies)
Discussion started by: EugeneG
3 Replies
4. Shell Programming and Scripting
Hello All:
I have an LDAP server that is used for authentication. Now the home directory id set to : /export/home/user1 . But I am logging in to different machines Solaris, Linux. The problem is I want the home directory to change depending on the os version (e.g. /export/home/user1/linux). Can... (1 Reply)
Discussion started by: disturbe_d
1 Replies
5. UNIX for Advanced & Expert Users
My users home directory located in a RHEL 5.0 nfs server.
Client is ubuntu 8.1 using NIS for authntication anf NFS for automounting
home Directory on the client side.
I set 700 to the users home directory.
My problem here is some of the users change the mode, which result in leak of... (2 Replies)
Discussion started by: a_artha
2 Replies
6. UNIX for Dummies Questions & Answers
Hi, Im getting this annoying problem on file permission when I copy a folder to a mounted external directory. the files inside the copied folders become all executable. I tried to search for ways how to undo the permission over the web but to no avail.
tried this one but it doesnt change a... (2 Replies)
Discussion started by: ida1215
2 Replies
7. Solaris
Hi ,
on my Solaris 10 machine user's home directory ownership is being changed automatically to their UID. can any one please tell me whats the reason behind it .
users are there in /etc/passwd file . /etc/shadow file is also there along with nssswitch.conf file and there is no changes made to... (5 Replies)
Discussion started by: usernew
5 Replies
8. Shell Programming and Scripting
Hi could some let me know how to prevent user from changing his home directory.......
Thanks in advance.... (1 Reply)
Discussion started by: Revanth547
1 Replies
9. Shell Programming and Scripting
Hi could some let me know how to prevent user from changing his home directory.......
Thanks in advance.... (6 Replies)
Discussion started by: rahul547
6 Replies
10. UNIX for Advanced & Expert Users
Hi,
I have created a shared directory on /home, where all users on a certain group have read, write and execute permissions.
I did this using
chmod -R g+rwx /home/shared/
The problem is, when a particular user creates a directory within /home/shared, other users are not able to write to... (8 Replies)
Discussion started by: lost.identity
8 Replies
LEARN ABOUT FREEBSD
adding_user
ADDING_USER(8) BSD System Manager's Manual ADDING_USER(8)
NAME
adding_user -- procedure for adding new users
DESCRIPTION
A new user must choose a login name, which must not already appear in /etc/passwd or /etc/mail/aliases. It must also not begin with the
hyphen '-' character. It is strongly recommended that it be all lower-case, and not contain the dot '.' character, as that tends to confuse
mailers. An account can be added by editing a line into the passwd file; this must be done with the password file locked e.g. by using
chpass(1) or vipw(8).
A new user is given a group and user id. Login and user id's should be unique across the system, and often across a group of systems, since
they are used to control file access. Typically, users working on similar projects will be put in the same groups. At the University of
California, Berkeley, we have groups for system staff, faculty, graduate students, and special groups for large projects.
A skeletal account for a new user ``ernie'' might look like:
ernie::25:30::0:0:Ernie Kovacs,508 Evans Hall,x7925,
642-8202:/a/users/ernie:/bin/csh
For a description of each of these fields, see passwd(5).
It is useful to give new users some help in getting started, supplying them with a few skeletal files such as .profile if they use /bin/sh,
or .cshrc and .login if they use /bin/csh. The directory /usr/share/skel contains skeletal definitions of such files. New users should be
given copies of these files which, for instance, use tset(1) automatically at each login.
FILES
/etc/master.passwd user database
/usr/share/skel skeletal login directory
SEE ALSO
chpass(1), finger(1), passwd(1), aliases(5), passwd(5), adduser(8), pwd_mkdb(8), vipw(8)
BSD
January 30, 2009 BSD