LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 02-16-2009, 01:55 PM   #1
treyhphp
LQ Newbie
 
Registered: Feb 2009
Posts: 6

Rep: Reputation: 0
create very limited linux user, only give access to rdesktop


I want to create a very limited user that can only click on 1 icon on their desktop, which will be a rdesktop link to a terminal server

We are running fedora core 10

Details:
1. remove gnome menu if possible (applications, places, system)
2. if 1 is not possible, be able to control whats on the menu
3. disable the ability to delete/modify/create desktop shortcuts
 
Old 02-16-2009, 02:21 PM   #2
thorkelljarl
Senior Member
 
Registered: Jun 2008
Posts: 1,796

Rep: Reputation: 213Reputation: 213Reputation: 213
I would, as root:

create a new user
change the permissions for that user to none
change the desktop with its icons,menu, etc, leaving the one link

When the system is booted to that user there are no modifications possible without permissions. You might also look at and remove the keyboard shortcuts to make the system the equivalent of a entry button and nothing else.

This is not something I have tried in its entirety, but I believe it should be possible. I can do it with my openSUSE 11.0 with KDE 3.5.

Last edited by thorkelljarl; 02-16-2009 at 02:44 PM.
 
Old 02-16-2009, 02:39 PM   #3
treyhphp
LQ Newbie
 
Registered: Feb 2009
Posts: 6

Original Poster
Rep: Reputation: 0
Ok I have found how to change the menus, and thats not a problem anymore.

How do I set the permissions for an individual user though?
 
Old 02-16-2009, 02:47 PM   #4
thorkelljarl
Senior Member
 
Registered: Jun 2008
Posts: 1,796

Rep: Reputation: 213Reputation: 213Reputation: 213
This is for 9, but should be much the same.

http://www.redhat.com/docs/manuals/l...ownership.html
 
Old 02-16-2009, 02:54 PM   #5
thorkelljarl
Senior Member
 
Registered: Jun 2008
Posts: 1,796

Rep: Reputation: 213Reputation: 213Reputation: 213
Oh yes

The user may need permission for the file that is the icon.
 
Old 02-16-2009, 02:55 PM   #6
jkzfixme
Member
 
Registered: Sep 2006
Location: Orange County, NY
Distribution: Ubuntu, Solaris, Android
Posts: 329
Blog Entries: 21

Rep: Reputation: 52
you might also want to check out gconf if your doing this on an enterprise level

Regards
JKZfixme
 
Old 02-16-2009, 03:06 PM   #7
treyhphp
LQ Newbie
 
Registered: Feb 2009
Posts: 6

Original Poster
Rep: Reputation: 0
What folder should I change permissions on to stop the user from changing the desktop background?

I was thinking of changing the owner of /home/lab to root and setting the permissions to 755.

I am definitely going to read more into gconf, looks like a good possible solution.
 
Old 02-16-2009, 05:55 PM   #8
thorkelljarl
Senior Member
 
Registered: Jun 2008
Posts: 1,796

Rep: Reputation: 213Reputation: 213Reputation: 213
I don't know. My approach seems different.

I thought that you might set the permissions for the one user to --- (xxxxxxx---), for all files, and then set the permission for the icon file to -------r--, although it might be---------x. Would the link be read or executed?

I am assuming that this one user is not owner, not group, but member of other users. It is also possible to have the one user as the only member of his own group, and have something like xxxx------ for that group, with the icon xxxxr----- or xxxx--x---.

This seems to me to be simple and easy, with no possibility of getting around the restriction, and easily changeable.

I am used to a different notation. Here are the corresponding notations.

http://www.zzee.com/solutions/linux-permissions.shtml
 
Old 02-17-2009, 06:01 AM   #9
treyhphp
LQ Newbie
 
Registered: Feb 2009
Posts: 6

Original Poster
Rep: Reputation: 0
I like your approach thorkelljarl but I don't know how to set permissions for everything for a specific user, maybe I'm just thinking about it differently.

If you were going to give the user lab read and execute permissions only for everything on the drive, what command would you use?

I actually ended up downloading gconf-editor and removing all the desktop icons. I removed all panels except the bottom one, and removed all buttons/applets from it. I added logoff and a custom launcher that links to rdesktop.
 
Old 02-18-2009, 10:20 AM   #10
thorkelljarl
Senior Member
 
Registered: Jun 2008
Posts: 1,796

Rep: Reputation: 213Reputation: 213Reputation: 213
Maybe this.

You could create a group, for example, "notmuch" with one member/user "notmuch" with the command useradd, giving "notmuch" its own login and password and its own /home. Boot as "notmuch" and make any changes, leaving "notmuch" as you want it.

Use chmod to change the permission of "notmuch" /home so that only the the owner may read or execute, that is ?r-------- or ?--x------, depending on which is needed. What the first sign (?) should be is the sign identifying the link, perhaps -.

The system is will still be open to root, and to other "users and groups and others" as it was configured before introducing "notmuch" Other users can boot the system and use chmod as root to modify the permission of "notmuch" /home to (?)rwx------ or whatever is needed, and as "notmuch" or root manage the "notmuch" user.

Sorry for the delay, but I had to think a bit and clarify the terminology for myself, since I have all this as a GUI and am a single user on a home system trying to play system administrator.

Please read the appropriate man pages beforehand, and report back what worked and how. Good Luck

http://www.redhat.com/docs/manuals/l...ownership.html

Last edited by thorkelljarl; 02-18-2009 at 10:44 AM.
 
Old 02-18-2009, 10:37 AM   #11
thorkelljarl
Senior Member
 
Registered: Jun 2008
Posts: 1,796

Rep: Reputation: 213Reputation: 213Reputation: 213
A note.

This last proposal is in continuation of the approach in my first post. Please disregard the details of Yesterday 12:55. I was trying to reinvent the wheel, or rather the structure and administration of user accounts.

Last edited by thorkelljarl; 02-18-2009 at 10:46 AM.
 
Old 02-18-2009, 10:56 AM   #12
MasterC
LQ Guru
 
Registered: Mar 2002
Location: Salt Lake City, UT - USA
Distribution: Gentoo ; LFS ; Kubuntu
Posts: 12,612

Rep: Reputation: 68
I'd personally scrap using a Desktop Environment for this user. KDE or Gnome don't really seem necessary and you could easily get away with simply launching rdesktop directly when X starts. If you still wanted the icon you could use a light window manager, maybe XFCE even. I'm not sure if I missed your purpose above, but if you simply want the app to launch when a user logs in, and then have the session restart when they are done, doing an automatic launch would seem to fit the purpose better.

Something like:

exec /usr/bin/fluxbox &
/usr/bin/rdesktop 192.168.1.2

In a .xinitrc file would seem like a good option. Launch it full screen in a standalone X session and all they can do is kill X and that will simply restart their session. Not a lot of room for them to play around with other things on the system.

-Chad
 
Old 02-18-2009, 11:18 AM   #13
QueenZ
Member
 
Registered: Sep 2008
Distribution: openSUSE, Ubuntu
Posts: 372
Blog Entries: 2

Rep: Reputation: 32
what's wrong with 'nobody' It's there by default..
 
Old 02-18-2009, 11:28 AM   #14
MasterC
LQ Guru
 
Registered: Mar 2002
Location: Salt Lake City, UT - USA
Distribution: Gentoo ; LFS ; Kubuntu
Posts: 12,612

Rep: Reputation: 68
My first thought is that the user nobody is designed to be just that, not a real user. No home directory, no permissions aside from the limited reason the user exists, no shell, etc. With all of this, I don't think it would be ideal to tweak the user to conform to a normal user (albeit limited) that would have a home directory from which certain variables would be declared and temp files written to allow them to start X and run rdesktop. Instead creating a separate similar user, but with slightly more resources on the system (a home directory and maybe a restricted shell) seems to me a more secure option.

-Chad
 
Old 02-18-2009, 02:19 PM   #15
thorkelljarl
Senior Member
 
Registered: Jun 2008
Posts: 1,796

Rep: Reputation: 213Reputation: 213Reputation: 213
A little more

This is a little more detailed on setting up a new user.

http://www.computerhope.com/unix/useradd.htm
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
create limited user freebsd jack111 *BSD 6 02-07-2009 03:32 AM
Limited User Access Jakeh2k1 Red Hat 1 06-07-2005 07:03 AM
give limited space on hdd per user nukeu666 Linux - General 2 08-12-2004 06:48 AM
Create Limited User Accounts epihammer Mandriva 3 05-18-2004 02:52 PM
uk governement to give linux limited trials salparadise Linux - General 2 10-10-2003 04:53 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie

All times are GMT -5. The time now is 10:07 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration