Solaris

Hi All,

I'm on Solaris 8, I need to provide Read-only access to a user to 2 directories only.
Using rsh (restricted shell) as the user's login shell, I can restrict the user's access to a certain directory only, but how can I set in such a way that the user can access only the 2 directories mentioned.
Need your expert advice... thanks in advance.


Cheers,
~Minaz

Hello,

Not sure to understand, what is the man pages of the restricted shell you mention?

Using rsh (Restricted Shell ) I can restrict a user to only one directory..i.e. the user cannot change directory

userid:x:5012:1: Description:/logs/log7:/usr/lib/rsh

$ echo $SHELL
/usr/lib/rsh
$ cd
cd: restricted


but,
Is there a way by which you can provide access to a user to only two directories & not just one.

Hope I'm clear

I can't find a nice way to do it... so here is an odd way (tested on solaris box, it works).

You have to create 3 user accounts per "real world" user, eg:

user1:x:200:200:comment:/:/usr/local/bin/my_way
dummy1:x:201:200:comment:/tmp/1:/usr/lib/rsh
dummy2:x:202:200:comment:/tmp/2:/usr/lib/rsh

Dummy1 and dummy2 homes dir are the two directories you are interested with and there default shell is the restricted sh.
User1 shell default is not a shell but a script that could look likes

#!/bin/ksh -p
IFS="
"
print Where do you want to go today?
select path in /tmp/1 /tmp/2 exit; do
[[ ${path} = "exit" ]] && exit
exec su - dummy$REPLY
done

So the user1 is in fact the dummy user that allow someone logged as user1 to switch or to /tmp/1 or /tmp/2

To me the big drawback of this is the fact that depending the directory the user is the uid change. Moreover you have to type users passwd each time you switch (If you implement this "horrible" thing I would suggest you to also implement sudoers capabilties).

Also, perhaps someone off the "Shell Programming and Scripting" forum could help you in case your stuff is possible using rsh or rksh

good luck!

Thanks for your opinion.

~Minaz