Restricting commands & access Post: 302852239

10 More Discussions You Might Find Interesting

1. Cybersecurity

restricting access...

restricted access... Hi I need to restrict users shell access to only $HOME under /home for each user. I don't want them getting out of their own directories. From what I understand chroot is something I could use, but I want to avoid this since it involves creating symbolic links to a number...

2. UNIX for Dummies Questions & Answers

Restricting access

I need to create a user that only has access to 1 directory (e.g. /vol/mita/test). The user needs to be able to rsh into that directory to run a script. The user should not be able to navigate to any other directories above /vol/mita/test. Any help would be appreciated!

3. Solaris

restricting access

Hi All, I'm on Solaris 8, I need to provide Read-only access to a user to 2 directories only. Using rsh (restricted shell) as the user's login shell, I can restrict the user's access to a certain directory only, but how can I set in such a way that the user can access only the 2 directories...

4. UNIX for Advanced & Expert Users

restricting root access

I'm the admin in a shop in which my developers have and use the root account, all UNIX newbies. I've been unable to convince management myself that this is an unacceptable practice. I've looked in a couple books I have and can't find any chapters, discussions, etc that make the argument that...

5. Solaris

restricting access to a server

We want to secure access to a server by restricting the number of users who can login to it. Our users are NIS users. Only few of them can telnet/ssh this server. Do you have any idea on how to implement that? thanks.

6. UNIX for Dummies Questions & Answers

Setting permissions and restricting access

Hi all, I have user called "Z". The home directory is /home/Z. I have another directory /home/Z/OP. Within /home/Z/OP, i have 2 directories /home/Z/OP/OP1 and /home/Z/OP2. I want to restrict access for Z to only access /home/Z/OP and /home/Z/OP1 and /home/Z/OP2. What kind of...

7. UNIX for Advanced & Expert Users

Restricting access to code

Hi All, I am facing a problem, regarding code security on a server. We have configured a server which contains our code (ear present in jboss/server/xyz/deploy) in it, and need to bind the code to the server itself so that no one can take the code out of the. the problem is that the password of...

8. Solaris

Restricting CPU Core Access

Hi all. I've had a quick look around but cant see anything exactly matching my requirements. I have a new T2000 running S10. Im looking to restrict the no. cores that a S10 non-global zone can use to 1 only. The box is single CPU but 8core. I want to do this to save on some software...

9. UNIX for Dummies Questions & Answers

Restricting SFTP access

Hello, I am using MySecureShell to chroot all sftp accesses. The problem that I have is that my boss does not want root to be able to use sftp. Root should still be able to ssh. Any ideas?

10. AIX

Switch Port Becoming Private & restricting access

Hello folks, I have an AIX server that is connected to a storage array via a Brocade switch using 4 ports from either side. The zoning is done such that there are 4 paths visible from the server to the storage. My work involves frequent disabling or enabling the switch ports that are...

LEARN ABOUT DEBIAN

fs_getcellstatus

FS_GETCELLSTATUS(1)					       AFS Command Reference					       FS_GETCELLSTATUS(1)

NAME

       fs_getcellstatus - Reports whether setuid programs are honored in a cell

SYNOPSIS

       fs getcellstatus -cell <cell name>+ [-help]

       fs getce -c <cell name>+ [-h]

DESCRIPTION

       The fs getcellstatus command reports whether the Cache Manager allows programs fetched from each specified cell to run with setuid
       permission. To set a cell's setuid status, use the fs setcell command; fs_setcell(1) fully describes how AFS treats setuid programs.

OPTIONS

       -cell <cell name>+
	   Names each cell for which to report setuid status. Provide the fully qualified domain name, or a shortened form that disambiguates it
	   from the other cells listed in the local /etc/openafs/CellServDB file.

       -help
	   Prints the online help for this command. All other valid options are ignored.

OUTPUT

       The output reports one of the following two values as appropriate:

	  Cell <cell> status: setuid allowed
	  Cell <cell> status: no setuid allowed

EXAMPLES

       The following example indicates that programs from the cell "abc.com" are not allowed to run with setuid permission.

	  % fs getcellstatus abc.com
	  Cell abc.com status: no setuid allowed

PRIVILEGE REQUIRED

       None

SEE ALSO

       CellServDB(5), fs_setcell(1)

COPYRIGHT

       IBM Corporation 2000. <http://www.ibm.com/> All Rights Reserved.

       This documentation is covered by the IBM Public License Version 1.0.  It was converted from HTML to POD by software written by Chas
       Williams and Russ Allbery, based on work by Alf Wachsmann and Elizabeth Cassell.

OpenAFS 							    2012-03-26						       FS_GETCELLSTATUS(1)

10 More Discussions You Might Find Interesting

1. Cybersecurity

restricting access...

Discussion started by: alwayslearningunix

2. UNIX for Dummies Questions & Answers

Restricting access

Discussion started by: ngagne

3. Solaris

restricting access

Discussion started by: max_min

4. UNIX for Advanced & Expert Users

restricting root access

Discussion started by: keith.m