Restricting use of su - (Solaris 11) Post: 303004215

10 More Discussions You Might Find Interesting

1. Cybersecurity

restricting access...

restricted access... Hi I need to restrict users shell access to only $HOME under /home for each user. I don't want them getting out of their own directories. From what I understand chroot is something I could use, but I want to avoid this since it involves creating symbolic links to a number...

2. UNIX for Dummies Questions & Answers

Restricting access

I need to create a user that only has access to 1 directory (e.g. /vol/mita/test). The user needs to be able to rsh into that directory to run a script. The user should not be able to navigate to any other directories above /vol/mita/test. Any help would be appreciated!

3. Solaris

restricting access

Hi All, I'm on Solaris 8, I need to provide Read-only access to a user to 2 directories only. Using rsh (restricted shell) as the user's login shell, I can restrict the user's access to a certain directory only, but how can I set in such a way that the user can access only the 2 directories...

4. Solaris

restricting access to a server

We want to secure access to a server by restricting the number of users who can login to it. Our users are NIS users. Only few of them can telnet/ssh this server. Do you have any idea on how to implement that? thanks.

5. Linux

Restricting IPs on Linux?

I have a need to allow only certain IP addresses to access a machine running Linux. I don't know how would i do it, not an expert at CMD? Thanks in advance for your help.

6. UNIX for Dummies Questions & Answers

Restricting SSH usage

Hello, For one of our servers, we have had people trying to illegally loggon using the ssh service. My manager has asked me to restrict ssh access to users in our internal network but close ssh access to the "outside" world. Could someone at the very least point me to some resources on the...

7. UNIX for Advanced & Expert Users

Restricting access to code

Hi All, I am facing a problem, regarding code security on a server. We have configured a server which contains our code (ear present in jboss/server/xyz/deploy) in it, and need to bind the code to the server itself so that no one can take the code out of the. the problem is that the password of...

8. UNIX for Dummies Questions & Answers

Restricting SFTP access

Hello, I am using MySecureShell to chroot all sftp accesses. The problem that I have is that my boss does not want root to be able to use sftp. Root should still be able to ssh. Any ideas?

9. Shell Programming and Scripting

restricting users

how can i make my users to not use particular commands in the network like:wall....... pl z help me regarding this

10. UNIX for Dummies Questions & Answers

Restricting File List while doing ls

Is there any best way to restrict some of the listed files when you do ls. In the output i am doing grep -v wanted to see if i can use a better command to get this output. Command: > ls -lrt wf_Load_25.log.INSTANCE_21_20072.* -rw-r--r-- 1 infrmtca infrmtca 19373 Mar 12 14:14...

LEARN ABOUT OPENSOLARIS

root_archive

root_archive(1M)					  System Administration Commands					  root_archive(1M)

NAME

       root_archive - manage bootable miniroot archives

SYNOPSIS

       /boot/solaris/bin/root_archive  pack archive root

       /boot/solaris/bin/root_archive  unpack archive root

       /boot/solaris/bin/root_archive  packmedia solaris_image root

       /boot/solaris/bin/root_archive  unpackmedia solaris_image root

DESCRIPTION

       The  root_archive  utility  is  used to manage bootable miniroot archives and is currently only available on x86 platforms. The utility can
       pack and unpack boot/root archives in both ufs and hsfs (iso9660) format. It will always generate ufs archives.

       root_archive also uses the lofi file driver to export a file as a block device (see lofi(7D)) and mount to mount or  unmount  file  systems
       and remote resources (see mount(1M)). root_archive requires the same privileges that are needed to run these commands.

SUBCOMMANDS

       The root_archive command has the following subcommands:

       pack archive root    Pack from the image found under the root directory to the archive.

       unpack archive root

	   Unpack from the archive to an unpacked image under the root directory.

       packmedia solaris_image root

	   Pack the solaris image to the root directory.

       unpackmedia solaris_image root

	   Unpack the solaris image from the root directory.

       For  packmedia  and  unpackmedia,  other items that do not go into the ramdisk image are copied or uncopied (see cpio(1)) as well. Specifi-
       cally, this includes all the packaging databases needed for pkgadd and the other packaging utilities to succeed which are not used  in  the
       running and hence pruned to conserve memory.

EXAMPLES

       Example 1 Unpacking the Solaris x86 install image

       The following command unpacks the current Solaris image from the root directory:

	 # root_archive unpackmedia 
	 /export/nv/solarisdvd.nvx_dvd/latest /export/Boot

       Where  /export/nv/solarisdvd.nvx_dvd/latest  represents	a path to a Solaris x86 install image and /export/Boot is a directory that will be
       purged or created, as necessary.

       Example 2 Packing the Solaris x86 install image

       The following command packs the current Solaris image to the root directory:

	 # root_archive packmedia 
	 /export/nv/solarisdvd.nvx_dvd/latest /export/Boot

EXIT STATUS

       The following exit values are returned:

       0    The command completed successfully.

       1    The command exited due to an error.

ATTRIBUTES

       See attributes(5) for descriptions of the following attributes:

       +-----------------------------+-----------------------------+
       |      ATTRIBUTE TYPE	     |	    ATTRIBUTE VALUE	   |
       +-----------------------------+-----------------------------+
       |Availability		     |SUNWcsu			   |
       +-----------------------------+-----------------------------+
       |Interface Stability	     |Stable			   |
       +-----------------------------+-----------------------------+

SEE ALSO

       cpio(1), bootadm(1M), mount(1M), attributes(5), lofi(7D)

SunOS 5.11							    26 Sep 2005 						  root_archive(1M)