Login or Register to Ask a Question and Join Our Community

Sponsored Content
Full Discussion: Prevent user from creating new user from his login
Top Forums UNIX for Advanced & Expert Users Prevent user from creating new user from his login Post 303032198 by Corona688 on Wednesday 13th of March 2019 02:25:10 PM
Old 03-13-2019
Quote:
Originally Posted by as7951
Hi All,

Thank you very much for your time and effort you have put in for this post.
Your response and positive comments values a lot for me.

I tried the below to achieve what i want to some extent.
Code:
cha ALL=(ALL) ALL
cha ALL=/usr/bin, !/usr/sbin/useradd, !/usr/sbin/userdel

A handful of the easiest ways cha can still add users on your system:
Code:
# Make a shell do it
sudo sh -c 'useradd'

# Put it in a script and run it
echo 'useradd' > nicetry.sh ; chmod +x nicetry.sh ; sudo $PWD/nicetry.sh

# Put it in a script and make a shell do it
echo 'useradd' > nicetry.sh ; sudo bash $PWD/nicetry.sh

# Duplicate the command to something sudoers hasn't blocked
sudo ln /usr/sbin/useradd /usr/sbin/nicetry ; sudo nicetry

# Install something else
sudo apt-get install alternate-utility ; sudo alternate-utility

# manually edit password files
sudo vi /etc/passwd ; sudo vi /etc/shadow

# edit sudoers to give yourself permissions
sudo visudo

# mount other folder on top of /etc.  Even an unwritable filesystem won't stop this one!
sudo mount --bind /fake-etc /etc

Your screen door is leaking. You blocked one pinhole. There's 10,000 more for you to find and plug individually.
Last edited by Corona688; 03-13-2019 at 03:41 PM..
These 2 Users Gave Thanks to Corona688 For This Post:
Don Cragun wisecracker
 

10 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

Creating a user that can't login

I need to set up/modify a user account on one of our machines which will allow the user to stay on the system, but not use their user id and password to login to the machine. It is for the purposes of an ftp user, so that nobody can then login as ftp/passwd. Ta.:) (2 Replies)
Discussion started by: danhodges99
2 Replies

2. AIX

Limiting length of user in while creating user

Hi all, I am a newbe to aix 5.2. I want to specify the characters used by users while creating user in aix like specifying the length of the password should i use some sript for that if it is then please let me know how to do this if yes give me the link for the scripts. Thanks in advance ... (2 Replies)
Discussion started by: Satya Mishra
2 Replies

3. UNIX for Dummies Questions & Answers

I create user but i cant login the user i created.

I created a user, i login as a root. I add him in the group where he can access and login as a root! I checked it in users' list and in group's list, he is there. My problem is this, I cant login using the username/account I just created! What should i do to use and login the user/account i've just... (5 Replies)
Discussion started by: jerome
5 Replies

4. Shell Programming and Scripting

Running script from other user rather than login user

Hi, My requirement is that i am login from ROOT in a script but when any command is coming which is logging to sqlplus then i have to run it with normal user as only normal user have permission to connect to sqlplus . i tried making a script like this : #! /bin/ksh su -... (3 Replies)
Discussion started by: rawatds
3 Replies

5. Cybersecurity

prevent user from excute command

Dears I want to prevent users from doing spesific command "history -c" or "history" in general How can I do ? (4 Replies)
Discussion started by: reaky
4 Replies

6. IP Networking

how to prevent a user from downloading on lan

hi all, i want to prevent users downloading files in the office as bandwidth becomes very low and affects work. one of my friend tried to close the connection using ethercap but this does not work. i have a debian desktop while other users use MS W!ndows. Please provide any help. Thanks (5 Replies)
Discussion started by: coolatt
5 Replies

7. Shell Programming and Scripting

How to Login as another user through Shell script from current user[Not Root]

Hi Every body, I would need a shell script program to login as different user and perform some copy commands in the script. example: Supppose ora_toms is the active user ora_toms should be able to run a script where user: ftptomsp pass: XXX should login through and run the commands ... (9 Replies)
Discussion started by: ujjwal27
9 Replies

8. Shell Programming and Scripting

Login into another user from user inside script

now i have logged in username : ramesh in unix Now i have to created script file to login into another user and have run a command inside that user and after executing the command i have to exit from that user. Inside script, i have to login into su - ram along with password : haihow and have to... (4 Replies)
Discussion started by: rammm
4 Replies

9. Shell Programming and Scripting

Prevent the user from changing his directory

Hi could some let me know how to prevent user from changing his home directory....... Thanks in advance.... (1 Reply)
Discussion started by: Revanth547
1 Replies

10. Shell Programming and Scripting

Prevent the user from changing his directory

Hi could some let me know how to prevent user from changing his home directory....... Thanks in advance.... (6 Replies)
Discussion started by: rahul547
6 Replies

LEARN ABOUT SUSE

chsh

chsh(1) 						      General Commands Manual							   chsh(1)

NAME

       chsh - change login shell

SYNOPSIS

       chsh [-D binddn] [-P path] [-s shell] [-l] [-q] [-u] [-v] [user]

DESCRIPTION

       chsh  is  used  to  change  the	user login shell.  A normal user may only change the login shell for their own account, the super user may
       change the login shell for any account.

       If a shell is not given on the command line, chsh operates in an interactive fashion, prompting the user  with  the  current  login  shell.
       Enter  the  new	value  to change the field, or leave the line blank to use the current value. Enter none to remove the current value.  The
       current value is displayed between a pair of [ ] marks.

       The only restrictions placed on the login shell is that the command name must be listed in /etc/shells, unless the invoker  is  the  super-
       user, and then any value may be added.  An account with a restricted login shell may not change their login shell.

       This version of chsh is able to change the shell of local, NIS, NIS+ and LDAP accounts , if the permissions allow it.

OPTIONS

       -D, --binddn binddn
	      Use  the	Distinguished  Name binddn to bind to the LDAP directory.  The user will be prompted for a password for simple authentica-
	      tion.

       -P, --path path
	      The passwd file is located below the specified directory path. chsh will use this files, not /etc/passwd.  This is useful for  exam-
	      ple  on  NIS master servers, where you do not want to give all users in the NIS database automatic access to your NIS server and the
	      NIS map is build from special files.

       -s, --shell
	      Specify your login shell.

       -l, --list-shells
	      Print the list of shells listed in /etc/shells and exit.

       -q, --quite
	      Don't be verbose.

       -u, --usage
	      Print a usage message and exit.

	   --help
	      Print a more verbose help text and exit.

       -v, --version
	      Print version information and exit.

FILES

       /etc/passwd - user account information
       /etc/shells - list of valid login shells

SEE ALSO

       chfn(1), passwd(5), shells(5)

AUTHOR

       Thorsten Kukuk <kukuk@suse.de>

pwdutils							   February 2004							   chsh(1)
All times are GMT -4. The time now is 10:23 AM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy