Disable startkde and gnome-session over ssh

deepaklukose · 01-11-2006, 09:25 PM

Hai
I would like to know how to disable gnome-session,startkde,twm (window managers) etc over ssh.Only few selected users/group must be able to use these commands.Other users must be allowed to use tools like kate,kwrite etc.
I am using Redhat Enterprise 4 Linux.

Deepak Lukose

samel_tvom · 01-12-2006, 09:04 PM

Hope this is the "right" way to do it, but why not do

chown root:specialgroup /path/to/program
on all those programs (gnome-sessions etc.) and do appropriate chmod on those programs so that users in the specialgroup group has permission to run the programs and "others" (in the chmod command) don't have the right to run the programs.

Those users who should be able to run the programs should then be a part of the specialgroup group.

Hope it helped

deepaklukose · 01-16-2006, 08:32 PM

I was expecting a more robust method like one using PAM.I believe,the solution by changing file permission can be overriden by getting a copy of startkde/gnome-session etc from another machine with same OS.

samel_tvom · 01-17-2006, 05:51 PM

Well, maybe try to do it with other programs then, like X or xinit.

deepaklukose · 01-17-2006, 08:43 PM

xinit and X servers are stopped using PAM,but people are bypassing this by using startkde etc in an ssh session.Ssh is needed for them to login and for programming.so there is no question of disabling ssh.the only option that remains is disabling these commands using PAM.BTW thank you,for ur fast replies.

samel_tvom · 01-18-2006, 05:07 PM

No worries, hope it works out for you =)