chattr and symbolic link

vm_devadas · 05-31-2012, 08:26 AM

A SLES11 box having custom setup where .profile is a symlink to a central application script. How to prevent users from deleting the .profile file. "chattr +i .profile" will be a quick n easy fix; but it cant be done on symlink, right?
Do you have any easy method to implement this?

rigor · 05-31-2012, 06:51 PM

Is there any reason the User's .profile could not be a simple script which merely executes the central application script?

em31amit · 05-31-2012, 09:02 PM

if users are login from ssh, you can force them to execute ".profile" or either create a script which loads this profile and make that script as a user shell. so that user's are force to load it.

SHELL SCRIPT SOMETHING LIKE THIS

Code:

cat newshell.sh

#!/bin/bash
source profile/file/path

change user shell to it.

Code:

chsh -s /path/to/new/shell USERNAME

make sure about the execute permission on new shell script.