How to restrict a user group to access the kernel

10 More Discussions You Might Find Interesting

1. UNIX for Advanced & Expert Users

Precaution to access user mode buffers from kernel

When accessing a user mode buffers from kernel space drivers what precautions must we take and how those precautions need to be implemented?

2. Red Hat

Restrict user access

Hi there I have an application user on my system that wants accesses to these file systems as such: rwx: /SAPO /SAPS12 /R3_888 /R3_888B /R3_888F /R3_888R r: /usr/sap these are the existing FS permissions:ownerships: # ls -ld /SAPO

3. UNIX for Dummies Questions & Answers

Restrict user access.

Hi All, How can we restrict a particular user access to a particular shell in solaris 10. Thanks in Advance.

4. UNIX for Dummies Questions & Answers

Restrict access to a set of people in a group

Hi, How can I restrict access to a set of people in a group on a directory? Ex.. The following are the permissions on a directory (dir1) rwxrwxr-- own1 grp1 dir1 where own1 is the owner grp1 is the group name and dir1 is the directory name. So., Is there any way that only few id's in...

5. UNIX for Dummies Questions & Answers

How to create/restrict a user with to have no privilege from other group

Hello experts I am new to Unix. Env : HPUX I need to create a user say testuser such that it does not have access to file/directories from the other group i.e the last 3 digits . How do I do that. Reason for such a request :- I have an existing user oracle which has default umask...

6. UNIX for Advanced & Expert Users

Can kernel process access user address space ?

7. UNIX for Dummies Questions & Answers

Restrict user access to their home dir

Hi! i'm using FreeBSD 6.2 and hosting my pc to frens in particular of sensitive information being saved to the PC, i would like to know is it possible for me to restrict user access to their /home dir. only? and also, i wanted to restrict them listing files under /etc thanks all!

8. UNIX for Advanced & Expert Users

Restrict FTP access to a single directory for only one user.

Hi All, It will be very great if you can help me in this issue. Thanks in advance. I need to enable FTP on a solaris9 server. I need to create a new user some "xxxxxx" and he can only FTP the files to and from between /tftpboot directory and network devices. Other users should not...

9. Red Hat

restrict access of a user to two directories only

Hi all, I am using RHEL 5.0 I need a user say test to have full access to two directories, say /tmp1 & /tmp2 only other than his home directory. I do not want to change his login shell which is ksh or bash by default. Moreover, he should not even have read access of other directories. ...

10. Programming

Aplication user and kernel mode (data access)

Hi all, I am trying to setup a program to use a device driver and am confusing buffer access between User and Kernel mode. I think all applications running in User space have to communicate with the device drivers using io control calls and then have some functions called back from the driver...

LEARN ABOUT SUSE

pam_group

PAM_GROUP(8)							 Linux-PAM Manual						      PAM_GROUP(8)

NAME

       pam_group - PAM module for group access

SYNOPSIS

       pam_group.so

DESCRIPTION

       The pam_group PAM module does not authenticate the user, but instead it grants group memberships (in the credential setting phase of the
       authentication module) to the user. Such memberships are based on the service they are applying for.

       By default rules for group memberships are taken from config file /etc/security/group.conf.

       This module's usefulness relies on the file-systems accessible to the user. The point being that once granted the membership of a group,
       the user may attempt to create a setgid binary with a restricted group ownership. Later, when the user is not given membership to this
       group, they can recover group membership with the precompiled binary. The reason that the file-systems that the user has access to are so
       significant, is the fact that when a system is mounted nosuid the user is unable to create or execute such a binary file. For this module
       to provide any level of security, all file-systems that the user has write access to should be mounted nosuid.

       The pam_group module functions in parallel with the /etc/group file. If the user is granted any groups based on the behavior of this
       module, they are granted in addition to those entries /etc/group (or equivalent).

OPTIONS

       This module does not recognise any options.

MODULE TYPES PROVIDED

       Only the auth module type is provided.

RETURN VALUES

       PAM_SUCCESS
	   group membership was granted.

       PAM_ABORT
	   Not all relevant data could be gotten.

       PAM_BUF_ERR
	   Memory buffer error.

       PAM_CRED_ERR
	   Group membership was not granted.

       PAM_IGNORE

	   pam_sm_authenticate was called which does nothing.

       PAM_USER_UNKNOWN
	   The user is not known to the system.

FILES

       /etc/security/group.conf
	   Default configuration file

SEE ALSO

       group.conf(5), pam.d(5), pam(8).

AUTHORS

       pam_group was written by Andrew G. Morgan <morgan@kernel.org>.

Linux-PAM Manual						    04/01/2010							      PAM_GROUP(8)

HP-UX