UNIX for Dummies Questions & Answers

I have two issues; any help regarding this would be highly appreciated.



I am stuck with these issues and any help would be greatly appreciated.

Thanks in advance for your reply.

issue 1: why not modify abc script to add a chown command at the tail end of it
to modify the ownership of the created directory?

otherwise -- i believe you may be able to do something like this:

su - efg -c abc

This way the script is actually run by user efg and thus the directories it
creates are owned by efg not xyz.

issue 2:

easiest for my money:
In the .profile, create an alias for the cd command:

Code:

alias -x cd=_cd

function _cd()
{
case $1 in
  acceptable_directory) \cd acceptable_directory ;;
  other_acceptable_directory) \cd other_acceptable_directory ;;
  *) echo permission denied. ;;
esac

alias -x unalias=:
}

Make the .profile only writeable by root, readable by group and public.

Thanks for your reply. Apparently there is a syntax error in the code. Here is the message I get.

.profile[39]: syntax error: `(' unexpected

Line 39 is the first statement:

function _cd()

oops. a little language overlap.

Just remove the () on the function declaration line:

function _cd
{

etc....

}

maybe this might work better:
This solution allows for relative paths in the cd command.
And also the use of CDPATH.

The "cd -" returns the user to the previous directory.

Code:

alias -x cd=_cd

function _cd
{

\cd $*

case $PWD in
### No operation for okay directories.
  $HOME) ;;
  /tmp) ;;
  /billcons) ;;
  *) echo permission denied.; \cd - ;;
esac

return
}

alias -x unalias=:

Hi,

Thanks a lot, this works fine when someone telnet to the box. But if they use filezilla this does not work. You can browse any directory using filezilla and that's what I am trying to prevent. I don't want anyone to be able to browse any directory either via telnet or filezilla or any other means other than what is defined in the profile.

yeah. filezilla.

under what login do they connect?

i believe your only hope is to make your whole system non-navigatable by world.
And make sure that the login and default group of the filezilla login can only
access the directories in question --- forgetting the shenanigans that I proposed
earlier.

Oh. and the filezilla login has to have its own unique group also.