Login or Register to Ask a Question and Join Our Community


UNIX for Dummies Questions & Answers

group & user permission question

 
Thread Tools Search this Thread
Top Forums UNIX for Dummies Questions & Answers group & user permission question
# 1  
Old 08-13-2008
Power group & user permission question
Folks;
I'd like to create a group on my Linux box & add a few users to it.
Is there a way to do so and restrict this group/users to have access to only one or directory trees?
Let's say i need this group to only have a read write access to only these two directories /opt/Virtu & /fsn/comers

How can i do so?

Your help is very much appreciated
# 2  
Old 08-13-2008
One way is to chroot those users to some directory - /home/whatever - with links to those two directories plus /usr - or you can copy just the utilities you want them to have down into a local /usr directory.

This is what is done with FTP accounts for example, where they are only allowed to mess around in one directory tree.
# 3  
Old 08-13-2008
Thanks Jim
but i'm not sure if i fully understand your solution. any clarification?
# 4  
Old 08-13-2008
cerate a dir.
change the group to the group you created. make the proper mode changes (rwx)
is not hard. you just need to calm down, and , if it helps, lay down some concept schematics on a paper
# 5  
Old 08-13-2008
Thanks Broli;
I'm aware of the creating/changing directories process. I was asking about how to restrict this group/users to have access to only one or directory trees?
Let's say i need this group to only have a read write access to only these two directories /opt/Virtu & /fsn/comers

Katkota
# 6  
Old 08-13-2008
Quote:
Originally Posted by Katkota
Thanks Broli;
I'm aware of the creating/changing directories process. I was asking about how to restrict this group/users to have access to only one or directory trees?
Let's say i need this group to only have a read write access to only these two directories /opt/Virtu & /fsn/comers

Katkota
suposing that /opt/Virtu has this permissions
-rwxrwxrwx root root
and you created the group virtu
chwon root:virtu /opt/Virtu
chmod 770
andmake the users youw ant, to be part of the virtu group

or maybe im not getting your question ...
# 7  
Old 08-13-2008
Be aware that the users will still be allowed on world writable directories (such as /tmp). Otherwise, you will got to stick with mcnamara's opinion on chroot(). Still, I must say chroot() is awfully easy to bypass without the proper kernel limitations (grsecurity).
 
Login or Register to Ask a Question

Previous Thread | Next Thread

9 More Discussions You Might Find Interesting

1. AIX

UID & GID instead of user name and group name

Hi Everyone, We are encountering the following issue on AIX 5.3. When we do ls -ltr the list displays only user id and group id instead of user name and group name. This is happening for all users except root. Whe we do ls -ltr with root user it shows perfectly fine. When we searched... (25 Replies)
Discussion started by: madhav.kunapa
25 Replies

2. Red Hat

User is a Part of a Group But Group Details Do Not Show the User

Hi, In the following output you can see the the user "richard" is a member on the team/group "developers": # id richard uid=10247(richard) gid=100361(developers) groups=100361(developers),10053(testers) but in the following details of the said group (developers), the said user... (3 Replies)
Discussion started by: indiansoil
3 Replies

3. Shell Programming and Scripting

New To UNIX - Need Script to create report of user & group accounts

Hi, I'm new to the world of UNIX and have been asked to create a complex script (at least complex to me:confused:) for AIX UNIX to create a report of all the users on the server including server, user, UID, groups, GID, etc. Found a script using lsuser, but the output is still lacking. 2 things I... (2 Replies)
Discussion started by: panthur
2 Replies

4. Shell Programming and Scripting

set only some command & scripts permission to a particular user

hi, i am new in unix.......i am using bash and i want to create a user which has only some command and scripts permission.........is it possible? thanx (1 Reply)
Discussion started by: rakeshtomar82
1 Replies

5. Shell Programming and Scripting

Special group & user privileges

Special group and user privileges help I'm having some trouble understanding the group and user privileges. So let's say I make a group.. and assign some users to the groups that I made. How would I -- 1) Allow different groups and different users to have full privileges over a file with .X... (5 Replies)
Discussion started by: LibRid
5 Replies

6. UNIX for Advanced & Expert Users

Permission denied, but user is owner and has group ownership too

Folks, I have a problem with a particular file, that seems to have some kind of lock on it, that takes around 1 hour approx to timeout. I have used lsof and nothing has an open file handle on it, yet I cannot open it. My user/group owns the file and I can create edit/delete files in... (6 Replies)
Discussion started by: scottrus
6 Replies

7. Shell Programming and Scripting

Find all files with group read OR group write OR user write permission

I need to find all the files that have group Read or Write permission or files that have user write permission. This is what I have so far: find . -exec ls -l {} \; | awk '/-...rw..w./ {print $1 " " $3 " " $4 " " $9}' It shows me all files where group read = true, group write = true... (5 Replies)
Discussion started by: shunter63
5 Replies

8. UNIX for Dummies Questions & Answers

user & group read/write access question

folks; I created a new users on my SUSE box and i need to give this user/group a read write access to one specific folder. here's the details: - I created new user "funny" under group "users". - I need to give this user "funny" a read/write access to another directory that is owned by "root".... (3 Replies)
Discussion started by: Katkota
3 Replies

9. UNIX for Dummies Questions & Answers

home directory & group in UNIX question

folks; I'm going to use LDAP on Solaris 10 to authenticate users, i have 3 questions, i'm hoping it can be possible: 1. when users login for the first time, Is there a way to auto create a home directory like "/home/"user_name" so we don't have to a create a home directory for every single... (3 Replies)
Discussion started by: Katkota
3 Replies
Login or Register to Ask a Question