12-11-2009
Directory restriction for specific users on Solaris
Hi all,
i have a question about directory accessing.
Question: therese is a x user which can login system, x user can only access specific directories on the system, even y directory has r-x access right for OTHER, x user will not access the y directory.
this x user must access specific directories on the file system.
is This scenario possible, is there any idea about it?
10 More Discussions You Might Find Interesting
1. UNIX for Advanced & Expert Users
Platform: AIX
Shell: KSH
Does anyone have a good way of warning users that when they do a 'vi' in a certain directory that they cannot save any changes in that directory.
For instance, if I have a production id that has all scripts in /myprod/dir, and if anyone comes to this directory and does... (1 Reply)
Discussion started by: giannicello
1 Replies
2. Solaris
dear all
does any one give any user write permission using access control list or another way to solve this problem (1 Reply)
Discussion started by: murad.jaber
1 Replies
3. Solaris
how to restrict the size of any directory in solaris. is there any command to give specific file size value for a directory?
is there any idea?
regards (3 Replies)
Discussion started by: nibiru78
3 Replies
4. Solaris
Hi all,
how can i grant write access to a selective users only with write access to a certain filesystem/directory in solaris 10.
Please help..i tried "fs setacl"...does not seem to work
Please adv..thanks in advance... (4 Replies)
Discussion started by: cromohawk
4 Replies
5. Solaris
I need to create a user account for a developer that will allow him rwx access to all resources in a directory. How can I do that?
Thanks (5 Replies)
Discussion started by: gsander
5 Replies
6. UNIX for Advanced & Expert Users
Hello,
We need to log the operations that specific user on Solaris 10 (SPARC) is performing on one directory and it's contents. I was able to configure solaris auditing service (auditd) and it works fine. The only problem is that auditd logs huge amount of unneeded information. We need to log... (0 Replies)
Discussion started by: +Yan
0 Replies
7. Solaris
Hi all,
I want to create a new user and grant him ONLY transfer files access to a specific directory where he can only upload and read the files. He should be restricted to this activity only.
Regards (6 Replies)
Discussion started by: gilldn
6 Replies
8. Shell Programming and Scripting
Hi,
i am new to shell scripts, i need to write a script that can monitor size of directory of specific users. Please help.
Thanks,
Nitin (2 Replies)
Discussion started by: nicksrulz
2 Replies
9. Solaris
Hello,
Im glad to become a member of this forums,
Im new on solaris and recentrly im introducing to use auditing service in that system.
The need is, that I need how to exclude a directory to the audit service not audit it.
And, a plus, I need of how to disable auditing the root user in... (0 Replies)
Discussion started by: sysh4ck
0 Replies
10. Solaris
Hi All,
As part of LDAP implementation we need to restrict users/groups locally on solaris machine:
Options tried:
sshd_config: as far as my testing it is restricting either user or group, as per the first preference.
pam_access.so by default I am unable to find(need some help if this is... (0 Replies)
Discussion started by: Sridaran
0 Replies
NWGRANT(8) nwgrant NWGRANT(8)
NAME
nwgrant - Add Trustee Rights to a directory
SYNOPSIS
nwgrant [ -h ] [ -S server ] [ -U user name ] [ -P password | -n ] [ -C ] [ -o object name | -O object id ] [ -t type ] [ -r rights ]
file/directory
DESCRIPTION
nwgrant adds the specified bindery object with the corresponding trustee rights to the directory.
nwgrant looks up the file $HOME/.nwclient to find a file server, a user name and possibly a password. See nwclient(5) for more information.
Please note that the access permissions of $HOME/.nwclient MUST be 600 for security reasons.
OPTIONS
-h
-h is used to print out a short help text.
-S server
server is the name of the server you want to use.
-U user
user is the user name to use for login.
-P password
password is the password to use for login. If neither -n nor -P are given, and the user has no open connection to the server, nwgrant
prompts for a password.
-n
-n should be given if no password is required for the login.
-C
By default, passwords are converted to uppercase before they are sent to the server, because most servers require this. You can turn off
this conversion by -C.
-o object name
The name of the object to be added as trustee.
-O object id
The id of the object to be added as trustee.
-t object type
The type of the object. Object type must be specified as a decimal value. Common values are 1 for user objects, 2 for group objects and
3 for print queues. Other values are allowed, but are usually used for specialized applications. If you do not specify object type,
object name is taken as NDS name.
-r rights
You must tell nwgrant which rights it should grant to the bindery object. The new rights for the object is specified by rights, which
can be either a hexadecimal number representing the sum of all the individual rights to be granted or a string containing characters
representing each right. Characters within the brackets may be in any order and in either case. Spaces are allowed between the brack-
ets - in which case the entire string should be quoted. Hexadecimal and character values for the rights are shown in this table:
00 = no access
01 = read access = R
02 = write access = W
08 = create access = C
10 = delete access = E
20 = ownership access = A
40 = search access = F
80 = modify access = M
100 = supervisory access = S
for a possible total of "1fb" or "[SRWCEMFA]" for all rights.
file/directory
You must specify the directory to which to add the object as trustee. This has to be done in fully qualified NetWare notation.
Example:
nwgrant -S NWSERVER -o linus -t 1 -r fb 'data:homelinus'
With this example, user linus is given all rights except supervisory to his home directory on the data volume. This example assumes the
existence of the file $HOME/.nwclient.
nwgrant -o linus -t 1 -r fb /home/linus/ncpfs/data/home/linus
With this example, user linus is given all rights except supervisory to his home directory on the data volume. This example assumes that
NWSERVER is already mounted on /home/linus/ncpfs mountpoint.
AUTHORS
nwgrant was written by Volker Lendecke with the corresponding NetWare utility in mind. See the Changes file of ncpfs for other contribu-
tors.
nwgrant 5/19/2000 NWGRANT(8)