Question regarding changing home directory?

pinga123 · 05-07-2012, 10:58 PM

We are using a separate non-root user for executing script say abc.
login with this user is only intend to create and execute the script.

All the scripts are stored at location /usr/local/sbin

Is it recommended to change the home directory of user to /usr/local/sbin ?

or shall i edit bash profile ?

Which one is more preferred?

this is to save some time

chrism01 · 05-08-2012, 01:07 AM

If(!) all the user does is run the app directly, then doing that+making the app the 'login shell' would work, if you set it up correctly.
On the other hand, if more flexibility is required eg user needs to do other stuff related to it, then your orig idea ie just make it the home dir would work.
In fact, providing you give the user/app a unique uid+gid ie not shared by anyone else, then giving him a std login would be ok, & possibly easier to manage.

pinga123 · 05-09-2012, 01:22 AM

Quote:

Originally Posted by chrism01

In fact, providing you give the user/app a unique uid+gid ie not shared by anyone else, then giving him a std login would be ok, & possibly easier to manage.

Not able to understand the concept behind the same. Can you please explain how will it be easier to manage.
Why there is need of giving user and app a unique uid+gid. I think uid and gid are associated with user .How they are related to script .Are you talking about access privileges on file such as rwx?

Btw all the scripts are created with this user only so basically uid gid of scripts are as same as the user.

So considering all this making home directory of user a /usr/local/sbin makes more sense.

chrism01 · 05-09-2012, 08:12 PM

In general management terms, if all users have their home in eg /home, then you don't have to worry about exceptions when you are doing system management type stuff.
You may also end up with other apps/users using /usr/local/sbin for other stuff.
Usually best to physically separate a person's home dir from prodn code imho.
So long as the uid/gid is unique, that should be enough (remove other/world perms).