On Mon, Jul 29, 2002 at 02:07:06PM +0530, RS 802.11 wrote:
> hi list,
>       I wan to create a guest login by giving guest only minimal 
> powers,ie i want guest to execute only selected commands. can any one tell 
> me how to do this.
> 
> to be more precise i want the guest to use only commands like ls,telnet 
> only and nothing else please tell me how to do this.

rbash is the way to go. What distribution/version are you using? RedHat doesn't
ship with rbash enabled by default. I have a patched specfile to enable it
(you will need the SRPM for 7.3).

Once you have rbash enabled, add your guest user with shell as /bin/rbash,
have an /etc/profile.d/ entry for the guest user to set his path to ~/bin (and
nothing else), and symlink from ~guest/bin any program you want him/her to use
to the actual location of the program. Pretty simple, actually.

You have to be careful not to let the restricted user access to programs that
allow shell escapes, though. Some of these programs can be configured to respond
to Control-Z by sending SIGSTOP to themselves rather than spawning a shell.

> ---------------------------------------------
> 
> God has not promised
> 
> Skies always  blue,
> 
> Flower-strewn pathways
> 
> All our life through;
> 
> God has not promised
> 
> Sun without rain,
> 
> Joy without sorrow,
> 
> Peace without pain

Please get rid of this junk.

Binand



-------------------------------------------------------
This sf.net email is sponsored by: Dice - The leading online job board
for high-tech professionals. Search and apply for tech jobs today!
http://seeker.dice.com/seeker.epl?rel_code=31
_______________________________________________
linux-india-help mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/linux-india-help

Reply via email to