How to restrict a user group to access the kernel

10 More Discussions You Might Find Interesting

1. UNIX for Advanced & Expert Users

Precaution to access user mode buffers from kernel

When accessing a user mode buffers from kernel space drivers what precautions must we take and how those precautions need to be implemented?

2. Red Hat

Restrict user access

Hi there I have an application user on my system that wants accesses to these file systems as such: rwx: /SAPO /SAPS12 /R3_888 /R3_888B /R3_888F /R3_888R r: /usr/sap these are the existing FS permissions:ownerships: # ls -ld /SAPO

3. UNIX for Dummies Questions & Answers

Restrict user access.

Hi All, How can we restrict a particular user access to a particular shell in solaris 10. Thanks in Advance.

4. UNIX for Dummies Questions & Answers

Restrict access to a set of people in a group

Hi, How can I restrict access to a set of people in a group on a directory? Ex.. The following are the permissions on a directory (dir1) rwxrwxr-- own1 grp1 dir1 where own1 is the owner grp1 is the group name and dir1 is the directory name. So., Is there any way that only few id's in...

5. UNIX for Dummies Questions & Answers

How to create/restrict a user with to have no privilege from other group

Hello experts I am new to Unix. Env : HPUX I need to create a user say testuser such that it does not have access to file/directories from the other group i.e the last 3 digits . How do I do that. Reason for such a request :- I have an existing user oracle which has default umask...

6. UNIX for Advanced & Expert Users

Can kernel process access user address space ?

7. UNIX for Dummies Questions & Answers

Restrict user access to their home dir

Hi! i'm using FreeBSD 6.2 and hosting my pc to frens in particular of sensitive information being saved to the PC, i would like to know is it possible for me to restrict user access to their /home dir. only? and also, i wanted to restrict them listing files under /etc thanks all!

8. UNIX for Advanced & Expert Users

Restrict FTP access to a single directory for only one user.

Hi All, It will be very great if you can help me in this issue. Thanks in advance. I need to enable FTP on a solaris9 server. I need to create a new user some "xxxxxx" and he can only FTP the files to and from between /tftpboot directory and network devices. Other users should not...

9. Red Hat

restrict access of a user to two directories only

Hi all, I am using RHEL 5.0 I need a user say test to have full access to two directories, say /tmp1 & /tmp2 only other than his home directory. I do not want to change his login shell which is ksh or bash by default. Moreover, he should not even have read access of other directories. ...

10. Programming

Aplication user and kernel mode (data access)

Hi all, I am trying to setup a program to use a device driver and am confusing buffer access between User and Kernel mode. I think all applications running in User space have to communicate with the device drivers using io control calls and then have some functions called back from the driver...

LEARN ABOUT LINUX

login.access

LOGIN.ACCESS(5)                                               BSD File Formats Manual                                              LOGIN.ACCESS(5)

NAME

     login.access -- login access control table

DESCRIPTION

     The login.access file specifies on which ttys or from which hosts certain users are allowed to login.

     At login, the /etc/login.access file is checked for the first entry that matches a specific user/host or user/tty combination. That entry can
     either allow or deny login access to that user.

     Each entry have three fields separated by colon:

     o   The first field indicates the permission given if the entry matches.  It can be either ``+'' (allow access) or ``-'' (deny access) .

     o   The second field is a comma separated list of users or groups for which the current entry applies. NIS netgroups can used (if configured)
         if preceeded by @. The magic string ALL matches all users.  A group will match if the user is a member of that group, or it is the user's
         primary group.

     o   The third field is a list of ttys, or network names. A network name can be either a hostname, a domain (indicated by a starting period),
         or a netgroup. As with the user list, ALL matches anything. LOCAL matches a string not containing a period.

     If the string EXCEPT is found in either the user or from list, the rest of the list are exceptions to the list before EXCEPT.

BUGS

     If there's a user and a group with the same name, there is no way to make the group match if the user also matches.

SEE ALSO

     login(1)

AUTHORS

     The login_access() function was written by Wietse Venema. This manual page was written for Heimdal.

HEIMDAL                                                           March 21, 2003                                                           HEIMDAL

HP-UX