User with limited access to one directory Post: 302370675

Sponsored Content

Operating Systems Solaris User with limited access to one directory Post 302370675 by q8devilish on Thursday 12th of November 2009 05:34:37 AM

11-12-2009

Registered User

i would like the user just to access /pcard17/trace

not his home directory

Code:

root@zfstest # df -h
Filesystem             size   used  avail capacity  Mounted on
/dev/dsk/c1t0d0s0       20G   9.8G   9.7G    51%    /
/devices                 0K     0K     0K     0%    /devices
ctfs                     0K     0K     0K     0%    /system/contract
proc                     0K     0K     0K     0%    /proc
mnttab                   0K     0K     0K     0%    /etc/mnttab
swap                    16G   1.7M    16G     1%    /etc/svc/volatile
objfs                    0K     0K     0K     0%    /system/object
sharefs                  0K     0K     0K     0%    /etc/dfs/sharetab
/platform/sun4u-us3/lib/libc_psr/libc_psr_hwcap1.so.1
                        20G   9.8G   9.7G    51%    /platform/sun4u-us3/lib/libc_psr.so.1
/platform/sun4u-us3/lib/sparcv9/libc_psr/libc_psr_hwcap1.so.1
                        20G   9.8G   9.7G    51%    /platform/sun4u-us3/lib/sparcv9/libc_psr.so.1
fd                       0K     0K     0K     0%    /dev/fd
swap                    16G   792K    16G     1%    /tmp
swap                    16G    48K    16G     1%    /var/run
/dev/dsk/c1t0d0s6       32G    32M    31G     1%    /data
/dev/dsk/c1t1d0s0       20G   9.8G   9.7G    51%    /bkp-root
iaspool                 15G   3.6G    11G    25%    /ias
oraclepool              15G   7.2G   7.5G    50%    /oracle
pcard01pool            9.8G   1.2G   8.6G    12%    /pcard01
pcard02pool             29G   5.5G    24G    19%    /pcard02
pcard03pool             29G   5.0G    24G    18%    /pcard03
pcard04pool             29G   4.0G    25G    14%    /pcard04
pcard05pool             49G    29G    20G    60%    /pcard05
pcard06pool             49G    22G    27G    46%    /pcard06
pcard07pool             49G    25G    24G    51%    /pcard07
pcard08pool             49G    19G    30G    38%    /pcard08
pcard09pool             29G   9.5G    20G    33%    /pcard09
pcard10pool             29G   6.0G    23G    21%    /pcard10
pcard11pool             29G    11G    19G    37%    /pcard11
pcard12pool             29G   6.0G    23G    21%    /pcard12
pcard13pool             29G   2.9G    26G    11%    /pcard13
pcard14pool             29G   2.9G    26G    11%    /pcard14
pcard15pool             29G   6.0G    23G    21%    /pcard15
pcard16pool             29G   1.6G    28G     6%    /pcard16
pcard17pool             49G    14G    35G    28%    /pcard17
pcard18pool             29G   4.1G    25G    14%    /pcard18
pcard19pool             29G    22K    29G     1%    /pcard19
pcard20pool             29G   2.1G    27G     8%    /pcard20
pcardbkppool           492G   106G   387G    22%    /pcardbkp
/vol/dev/dsk/c0t0d0/sol_10_509_sparc
                       2.5G   2.5G     0K   100%    /cdrom/sol_10_509_sparc
root@zfstest # cd /pcard17/trace
root@zfstest # pwd
/pcard17/trace
root@zfstest #cd ..
root@zfstest # ls -l
total 475
drwxrwxrwx   2 ora10g   dba            2 Mar 12  2007 lost+found
drwxr-xr-x   2 root     root           8 Sep  6 13:04 oper
drwxrwxrwx   3 ora10g   dba         2518 Oct 25 14:25 trace
root@zfstest #

q8devilish

View Public Profile for q8devilish

Find all posts by q8devilish

8 More Discussions You Might Find Interesting

1. Solaris

How to create a new ftp user account with limited access..?

Hi All, I'm using solaris 2.8, and I want create a new ftp user account with the following restrictions: - Have only ftp access, no telnet or rlogin - Have restricted access to its home directory example /export/home/newuser - Deny access to any other directory. Thanks for your help, ...

2. UNIX for Advanced & Expert Users

Restrict FTP access to a single directory for only one user.

Hi All, It will be very great if you can help me in this issue. Thanks in advance. I need to enable FTP on a solaris9 server. I need to create a new user some "xxxxxx" and he can only FTP the files to and from between /tftpboot directory and network devices. Other users should not...

3. UNIX for Dummies Questions & Answers

user with limited access

dear guys, sorry for asking a noob :p question, tried to search the forum for an answer but couldn't find one, i am running solaris 10 and i would like to create a user with limited access to view only one directory, the directory already exist, is this possible:confused:? thanks and regards

4. Solaris

create user with RWX access to a specific directory in Solaris 10

I need to create a user account for a developer that will allow him rwx access to all resources in a directory. How can I do that? Thanks

5. UNIX for Advanced & Expert Users

new userid with limited access

Hi, I want to create a user using useradd -m test. But my requirement is he should not change his directory from Home directory. How can I restric the user not to change his directory from his home dir? Thanks, Suresh Double Post

6. Solaris

Limit FTP user's access to a specific directory

Hi, I have searched "Limit FTP user's access to a specific directory" subject for 3 days. I found proftp and vsftp but i couldn't compile and install. Is there any idea. Please suggest.

7. Solaris

Limit bash/sh user's access to a specific directory

Hello Team, I have Solaris 10 u6 I have a user test1 using bash that belong to the group staff. I would like to restrict this user to navigate only in his home directory and his subfolders but not not move out to other directories. How can I do it ? Thanks in advance

8. UNIX for Beginners Questions & Answers

Linux sftp — how to add new user to access exist directory with write permission?

I have built a website and I can access and edit the website'files on server via the root user. The current file and directory structures are not changeable. Now I am hiring a webpage designer to help me re-design some pages, I am going to let the designer edit the files directly on the server. So...

LEARN ABOUT OSX

git-shell

GIT-SHELL(1)							    Git Manual							      GIT-SHELL(1)

NAME

       git-shell - Restricted login shell for Git-only SSH access

SYNOPSIS

       chsh -s $(command -v git-shell) <user>
       git clone <user>@localhost:/path/to/repo.git
       ssh <user>@localhost

DESCRIPTION

       This is a login shell for SSH accounts to provide restricted Git access. It permits execution only of server-side Git commands implementing
       the pull/push functionality, plus custom commands present in a subdirectory named git-shell-commands in the user's home directory.

COMMANDS

       git shell accepts the following commands after the -c option:

       git receive-pack <argument>, git upload-pack <argument>, git upload-archive <argument>
	   Call the corresponding server-side command to support the client's git push, git fetch, or git archive --remote request.

       cvs server
	   Imitate a CVS server. See git-cvsserver(1).

       If a ~/git-shell-commands directory is present, git shell will also handle other, custom commands by running "git-shell-commands/<command>
       <arguments>" from the user's home directory.

INTERACTIVE USE

       By default, the commands above can be executed only with the -c option; the shell is not interactive.

       If a ~/git-shell-commands directory is present, git shell can also be run interactively (with no arguments). If a help command is present
       in the git-shell-commands directory, it is run to provide the user with an overview of allowed actions. Then a "git> " prompt is presented
       at which one can enter any of the commands from the git-shell-commands directory, or exit to close the connection.

       Generally this mode is used as an administrative interface to allow users to list repositories they have access to, create, delete, or
       rename repositories, or change repository descriptions and permissions.

       If a no-interactive-login command exists, then it is run and the interactive shell is aborted.

EXAMPLE

       To disable interactive logins, displaying a greeting instead:

	   $ chsh -s /usr/bin/git-shell
	   $ mkdir $HOME/git-shell-commands
	   $ cat >$HOME/git-shell-commands/no-interactive-login <<EOF
	   #!/bin/sh
	   printf '%s
' "Hi $USER! You've successfully authenticated, but I do not"
	   printf '%s
' "provide interactive shell access."
	   exit 128
	   EOF
	   $ chmod +x $HOME/git-shell-commands/no-interactive-login

       To enable git-cvsserver access (which should generally have the no-interactive-login example above as a prerequisite, as creating the
       git-shell-commands directory allows interactive logins):

	   $ cat >$HOME/git-shell-commands/cvs <<EOF
	   if ! test $# = 1 && test "$1" = "server"
	   then
		   echo >&2 "git-cvsserver only handles "server""
		   exit 1
	   fi
	   exec git cvsserver server
	   EOF
	   $ chmod +x $HOME/git-shell-commands/cvs

SEE ALSO

       ssh(1), git-daemon(1), contrib/git-shell-commands/README

GIT

       Part of the git(1) suite

Git 2.17.1							    10/05/2018							      GIT-SHELL(1)