can i add user such he can only execute process

amar.sree · 05-04-2012, 04:55 AM

hi all,

can u all pls help me to create a user and that he can only execute HTTP process only...........

thanks in advance
Amar

unSpawn · 05-04-2012, 11:22 AM

Quote:

Originally Posted by amar.sree

create a user and that he can only execute HTTP process only.

What exactly do you mean? Should this unprivileged user start the HTTP process (meaning: run a web server)? Or do you mean this unprivileged user should be able to only access (remote) hosts via HTTP? Or what else? Please explain and be verbose.

Kustom42 · 05-04-2012, 03:49 PM

If you are looking to set up the user to be able to login via ssh and start,stop,restart apache you would simply add them as a regular user and set up sudo permissions for that user to those commands. You would simply run the 'visudo' command to edit your sudoers file and add this to the bottom:

Code:

username       ALL=(ALL)       NOPASSWD: /etc/init.d/httpd

amar.sree · 05-04-2012, 08:25 PM

thank u all for replies..........

I had this question from interviewer...he asked me to add an user and that he should only execute httpd process(.,ie start,restart,reload,stop,)..?

IS it possible if he was given with nologin shell ? .if he was given with no login shell from where he can execute process

thnx & rgds
Amar

Kustom42 · 05-07-2012, 10:52 AM

Would not be possible with a nologin shell.

em31amit · 05-07-2012, 11:16 AM

change shell to customized shell script can work in this case. create a script which have these option to start and stop and just change the user shell to this script. once user logged into the system that shell script will execute which have only predefined options to start/stop/reload and exit.