How to restrict user to one folder alone when they log in


 
Thread Tools Search this Thread
Top Forums UNIX for Dummies Questions & Answers How to restrict user to one folder alone when they log in
# 1  
Old 01-11-2011
How to restrict user to one folder alone when they log in

Can some one help me with this issue . I require to restrict a particular user to a particular folder alone when they log in. I dont want this particular user to come out of this folder.

Kindly help
# 2  
Old 01-11-2011
On what architecture OS and version?
Is there a restricted shell on your platform?
Do a man of rsh or rksh (r for restricted not remote...)
# 3  
Old 01-11-2011
There is an open source application called "chrsh" that will provide a chroot'ed shell access. This should provide the features you are looking for.
# 4  
Old 01-11-2011
Also it would be helpful to know how the user is going to log in? (ssh, ftp, telnet, cvs?).

Depending on your particular needs, a chroot would do the work or a custom shell (like the ones mentioned above).
# 5  
Old 01-11-2011
It would also be helpful to know what the user is allowed to do.

The Resricted Shell suggested above is a very good recommendation. In addition you will need to force a Restricted Path in the profile file and point it only to a directory containing a copy of the unix commands which the user is allowed to use.
This is hard work to set up and I have had to do it for users on technical training courses totally unrelated to the main operation of the server. Always assume that the trainee can Google common hacks. Dangerous programs are the likes of "vi" and "more" which can allow breakout to Shell. If in doubt don't let the user access the program or data.
Advise enable long Shell history on Restricted accounts and analyse the content. 99% will be boring. [There are legal issues here where you need to warn staff that access is monitored. I am not a lawyer so DYOR].
# 6  
Old 01-16-2011
sorry for the delayed response.....The user normally logs in through an FTP tool WS_FTP PRO and download some patients files from that location . We are using Sun Solaris 10. we wanted the user to access only their physician office patients from that dir....we dont want them to move one level above the dir and access other physician office patients info....

kindly help.
# 7  
Old 01-16-2011
If they don't have execute permissions to the directory below that directory they won't be able to chdir through it. So, what permissions are on the directory, what user and group does it belong to, and what groups does the user in question belong to?
 
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. Web Development

Restrict user for certain number of connection

Hello, I need help in Apache to restrict user for number of concurrent connection. its basically related to nagios monitoring site. End user opening N no of tab to monitor and it increase load on server. any setting will help me here. (3 Replies)
Discussion started by: ghpradeep
3 Replies

2. HP-UX

Restrict ssh for particular user

Dear Concern, We want to restrict ssh for particular user "oracle". Our HP UX version is as below. Please advise. # uname -a HP-UX tabsdb02 B.11.31 U ia64 2963363594 unlimited-user license (2 Replies)
Discussion started by: makauser
2 Replies

3. AIX

How to restrict user to a particular directory?

hi, I want to restrict some user access to only 1 directory (including all sub-directories/files in it). can you please explain me, how can we do this? example; Filesystem GB blocks Used Free %Used Mounted on /dev/hd4 2.61 1.02 1.59 40% / /dev/hd2 ... (7 Replies)
Discussion started by: aaron8667
7 Replies

4. Red Hat

Restrict user access

Hi there I have an application user on my system that wants accesses to these file systems as such: rwx: /SAPO /SAPS12 /R3_888 /R3_888B /R3_888F /R3_888R r: /usr/sap these are the existing FS permissions:ownerships: # ls -ld /SAPO (9 Replies)
Discussion started by: hedkandi
9 Replies

5. UNIX for Dummies Questions & Answers

Restrict user access.

Hi All, How can we restrict a particular user access to a particular shell in solaris 10. Thanks in Advance. (5 Replies)
Discussion started by: rama krishna
5 Replies

6. Red Hat

Restrict user to a particular directory

Hi I have a Fedora10 server and i need a particular user to view files only in a particular folder. All other files in other folders having "read" permission for all shouldn't be accessible to this user. Please let me know if ther's a way. Thanks, HG (5 Replies)
Discussion started by: Hari_Ganesh
5 Replies

7. UNIX for Dummies Questions & Answers

Restrict command for an user ?

Hi everyone ! I got "viewer" and "root" user on a *nix computer. When i log in using "viewer" I only can use "df" command. When I try another command like "ls" it say : -bash: ls: command not found I checked permission of "/bin/ls" file, it has excute permission for everyone. Inside home... (4 Replies)
Discussion started by: camus
4 Replies

8. UNIX for Advanced & Expert Users

Restrict Access to the folder

Hi I have requirement to create 3 new users on my server but to restrict their access to a set of particular folders. /export/home/kapil/shared, /export/home/kapil/shared/Folder1 /export/home/kapil/shared/Folder2 These folders should be accessible to all the 3 users and to me too.... (1 Reply)
Discussion started by: kapilk
1 Replies

9. AIX

New user and restrict path

Hello I have a question in Aix 5.3 can I create a user, that only can see a specify path. I mean the user log in the default path its /home/newuser he type cd the path that need to check /example/directory_check but if he wants to go to / or any other path. we can not do this. I only... (1 Reply)
Discussion started by: lo-lp-kl
1 Replies

10. Solaris

restrict a user to certain command

Hi all, I am using Sun OS 5.10. I am new to Unix. Is there some way to restrict a specific user to certain command say "/usr/bin/more" ?? for example: I want that user1 can execute more command & user2 can't. Can we somehow edit .profile file in the home directory of user to achieve... (1 Reply)
Discussion started by: vikas027
1 Replies
Login or Register to Ask a Question