How to set restrictions

Braynid · 07-09-2006, 10:08 AM

Hello,
So i have the need to restrict the commands some users have on my Ubuntu server RC 6.06.
Lets say i just want them to use two scripts 'etrace' and 'eping'. No 'cd' no 'ls' nothing. I thought of using 'chmod' on directories in /bin. Can you please give me any suggestions?

Thanks.

theNbomr · 07-09-2006, 01:13 PM

Write a captive script or program that launches at login time (ie. put it in /etc/password/ per user). There are many ways of actually writing the script, ranging from a simple bash script (difficult to make bullet proof) to a full GUI written in a compiled language such as C.

--- rod.

btmiller · 07-09-2006, 02:00 PM

There's also ways of restricting the shell itself (restricted bash, though it works with other shells too). The bash man pages or Google can tell you exactly how...

Braynid · 07-09-2006, 02:02 PM

The intention it's not to make bullet proof. All i want it's to prevent the regular users form accesing any command and those who know what they do to be delayed so that i can notice what they're up to. Any suggestions on actualy how to write the script?

theNbomr · 07-09-2006, 03:01 PM

How about this, for a start?

Code:

#! /bin/bash

while [ 1 ]
do

        echo "Enter '1' or '2'"
        echo 1. Program 1
        echo 2. Program 2

        read prognum

        case $prognum in

                1) echo launching Program 1
                ;;

                2) echo Launching program 2
                ;;

                *) exit
                ;;
        esac

done

You need to flesh it out with your actual program names, more informative menu, etc. Make it executable, and name it in /etc/password as the 'shell' for appropriate users. Test it by executing from an ordinalry bash shell.

--- rod.