01-05-2010
Quote:
Originally Posted by
vasanthrj
I am the root user.. I have created users and groups...
Suppose if the non-user enter into through Putty SSH. He should have access only to home folder and cannot move to other than $HOME. User should not able to root files and /$ files.
This totally depends on your set up. Out of the box Ubuntu install is probably only going to all full access to ~/ (home) but not to anything else. However, if the ssh into a linux box they will still get read and execute access to a lot of other files. What exactly are you talking about specifically?
If you set up your own users and groups then it will abide by those POSIX, and if you go even further like ACLs you can add even more settings to it.
When I ssh into my web server I have only rwx access to my ~/ but I have read and execute access to other files. I can use ls and see what is in /etc and I can read some files but cannot write to them, so access is a very broad term. Also you don't need to be the root user to access files/folders owned by root. All you need is sudo access and to be in the /etc/sudoers, and Ubuntu uses this. So any user that is in that group or has that access can gain root privileges via sudo.
8 More Discussions You Might Find Interesting
1. Shell Programming and Scripting
hi,
need help in writing a script in perl.
requirement :
1. Search for the files in a particular folder
2. search for a string in the file names
3. Delete the file which matches the string.
Ex: if the folder is C:\TEST
and the folder has 5 files like
2009ABCG.txt
2009MNO.txt... (2 Replies)
Discussion started by: adityamahi
2 Replies
2. Red Hat
While enhancing security of my temporary folder in the post described in Secure temporary folders on existing Unix or Linux systems | SysAdmin.MD my redirection fails. This commands always fails
echo "/mnt/tmp /tmp ext3 loop,noexec,nosuid,rw 0 0" >> /etc/fstab
Can anybody please tell my why? (1 Reply)
Discussion started by: synthea
1 Replies
3. UNIX for Dummies Questions & Answers
Hi:
I have:
folderA
|----folderB
|----folder1
|----folder2
|----folder3
|----folder3.1
Question:
How can I find *.txt ONLY from /folderA/folderB/ and not the others folder1,2,3??
I tried:
find... (8 Replies)
Discussion started by: iga3725
8 Replies
4. Shell Programming and Scripting
Friends
I have a directory structure /a/b/c/applets/ This directory has .java, .class and other applet files. I gave the applets folder 755 permission because these applets are displayed at different web pages of a portal.
Now I want to restrict the visibility of all the files in this... (0 Replies)
Discussion started by: dahlia84
0 Replies
5. UNIX for Dummies Questions & Answers
Hello,
Well I have a web with a very bad structure (a vBulletin forum) and I want it redirected to a newer folder in the same server but with a upper level folder.
Current structure is:
https://www.unix.com/vbulletin/upload/index.php
And I want it to be:... (0 Replies)
Discussion started by: Rafaweb
0 Replies
6. Solaris
I want to periodically check if ASCII password/config files on Unix have 400 or 600 access. Folders and files are owned by designated group and user. Folders and Files do not have world write access.
Are there any tools/scripts available for this kind of auditing that I can use on Solaris? (7 Replies)
Discussion started by: kchinnam
7 Replies
7. Shell Programming and Scripting
Hi All,
I have a requirement to monitor the sub-directories under /home in a way that if the the folder size increases by 30 GB in a span of like an hour then it needs to send email alerts listing what as the actual size was and what's the current size which the subject listing the sub-directory... (25 Replies)
Discussion started by: Shailesh6
25 Replies
8. UNIX for Dummies Questions & Answers
How is the level of access on a particular folder determined? I have heard (its just hearsay so am not particularly sure of it) that the access a particular user/group has to a low level directory is also affected by the level of access granted to the user/group on its parent directories. e.g.
... (1 Reply)
Discussion started by: jawsnnn
1 Replies
LEARN ABOUT OPENDARWIN
ssh-keysign
ssh-keysign(1M) ssh-keysign(1M)
NAME
ssh-keysign - ssh helper program for host-based authentication
SYNOPSIS
ssh-keysign
ssh-keysign is used by ssh(1) to access the local host keys and generate the digital signature required during host-based authentication
with SSH protocol version 2. This signature is of data that includes, among other items, the name of the client host and the name of the
client user.
ssh-keysign is disabled by default and can be enabled only in the global client configuration file /etc/ssh/ssh_config by setting Host-
basedAuthentication to yes.
ssh-keysign is not intended to be invoked by the user, but from ssh. See ssh(1) and sshd(1M) for more information about host-based authen-
tication.
/etc/ssh/ssh_config
Controls whether ssh-keysign is enabled.
/etc/ssh/ssh_host_dsa_key
/etc/ssh/ssh_host_rsa_key
These files contain the private parts of the host keys used to generate the digital signature. They should be owned by root, readable
only by root, and not accessible to others. Because they are readable only by root, ssh-keysign must be set-uid root if host-based
authentication is used.
ssh-keysign will not sign host-based authentication data under the following conditions:
o If the HostbasedAuthentication client configuration parameter is not set to yes in /etc/ssh/ssh_config. This setting cannot be overri-
den in users' ~/.ssh/ssh_config files.
o If the client hostname and username in /etc/ssh/ssh_config do not match the canonical hostname of the client where ssh-keysign is
invoked and the name of the user invoking ssh-keysign.
In spite of ssh-keysign's restrictions on the contents of the host-based authentication data, there remains the ability of users to use it
as an avenue for obtaining the client's private host keys. For this reason host-based authentication is turned off by default.
See attributes(5) for descriptions of the following attributes:
+-----------------------------+-----------------------------+
| ATTRIBUTE TYPE | ATTRIBUTE VALUE |
+-----------------------------+-----------------------------+
|Availability |SUNWsshu |
+-----------------------------+-----------------------------+
|Interface Stability |Evolving |
+-----------------------------+-----------------------------+
ssh(1), sshd(1M), ssh_config(4), attributes(5)
AUTHORS
Markus Friedl, markus@openbsd.org
HISTORY
ssh-keysign first appeared in Ox 3.2.
9 Jun 2004 ssh-keysign(1M)