telnet question

jonfa · 04-09-2002, 12:22 AM

Hi All,

Is it possible to allow a user to telnet in, but that user is trapped in a directory? I want a user to be able to execute a program from the command prompt, but only be able to do that one task and nothing else. Thanks.

Jon

finegan · 04-09-2002, 01:06 AM

I think I have one. A friend of mine has this on his machine. Create a user name, whatever, music, and then in /etc/passwd change the typical:

bob:x:1001:100:J.R. "Bob" Dobbs,13013,,:/home/bob:/bin/bash

To something like:

music:x:1002:100:Put Another Nickel In,,,:/home/music:/usr/local/bin/mp3blaster

In this case there is no password in /etc/shadow for the user music, but there easily could be one. When someone logs in as music, instead of exec'ing bash, it executes mp3blaster.

Cheers,

Finegan

jonfa · 04-09-2002, 05:57 AM

That worked perfect. Thank you!

jatimon · 04-09-2002, 02:07 PM

while that works for one single command, what about when you want him to have access to two commands?

I suggest making him chrooted and only putting the commands you want him to be able to execute in his /bin directory.

great instructions on chroot at www.linuxdoc.org