LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
Search this Thread
Old 08-04-2004, 05:27 AM   #1
Obie
Member
 
Registered: Apr 2004
Distribution: Red Hat
Posts: 290

Rep: Reputation: 30
Question Access Levels


I did ask in the past what folders users should never have access to and if I remember correctly I was told that users should never have access to /usr/sbin. Is there a definitive guide that includes what else users shouldn't have access to a far as folders and files are concerned?

Secondly, what commands should a user not have access to E.g. Would it be safe to provide the "whereis" command for example?
 
Old 08-28-2004, 04:58 AM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 27,277
Blog Entries: 54

Rep: Reputation: 2852Reputation: 2852Reputation: 2852Reputation: 2852Reputation: 2852Reputation: 2852Reputation: 2852Reputation: 2852Reputation: 2852Reputation: 2852Reputation: 2852
I did ask in the past what folders users should never have access to and if I remember correctly I was told that users should never have access to /usr/sbin.
Acces in what respect?


Secondly, what commands should a user not have access to E.g. Would it be safe to provide the "whereis" command for example?
Again depends on the reasons and means ppl will/should have access to binaries. If you're providing one-service access (unprivileged users with a /bin/false shell account or a virtual account) it's not sane to provide access to for instance development tools.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Why won't my FC3 rc0 and rc6 levels not call kill script when entering those levels? dvkwiatk Linux - General 2 11-11-2006 08:09 AM
Help with permissions levels bison42 Linux - Newbie 7 02-22-2005 10:26 PM
how do I use the security levels bkhornet Mandriva 1 12-14-2004 04:40 AM
Sound levels jrdioko Linux - Software 4 06-18-2004 10:28 PM
User levels? Eternal LQ Suggestions & Feedback 2 04-17-2002 07:01 AM


All times are GMT -5. The time now is 11:20 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration