LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)
-   -   account with uid 77777777 , guest id , how do I block access ? (https://www.linuxquestions.org/questions/linux-security-4/account-with-uid-77777777-guest-id-how-do-i-block-access-755364/)

jrandles 09-15-2009 10:33 AM

account with uid 77777777 , guest id , how do I block access ?
 
Im trying to send nfs connections with uid 77777777 to a black hole to restrict access. How do I do this ?

chrism01 09-15-2009 08:07 PM

I don't think Linux permissions tools really work that way ie actively disallow a specific uid.
It's more a case of only actively allowing everybody else.

You could look at netgroups+NIS http://www.linuxtopia.org/online_boo...g-exports.html
That page also mentions RHEL NFS can use acls; might be worth a try.

Maybe try putting that user in his own primary group eg guest/77777777, don't add any other secondary groups to him and and never allow any group/file to have guest group ownership (apart from his home dirs).

Also, of course set world ('other') perms to '---' everywhere you can.


All times are GMT -5. The time now is 03:14 AM.