ssh account to restart 1 service ?

elkhedewy · 05-21-2013, 01:08 PM

Hello,

I created account on my linux machine for one of my clients, and allowed him to restart red5 service

i did that using visudo by adding
username ALL = /etc/init.d/red5

but when he makes ls /var/ or any other dir, he is allowed to see the content of /var.

The question is how to restrict him from going outside his homedir and still can restart red5 service

Thank you

elkhedewy · 05-21-2013, 01:25 PM

One more thing could help me.

I need to know how to make this user once he logged in the ssh execute automatically /etc/init.d/red5 restart and then foce him to logout from ssh.

which means that everytime he needs to restart red5 which is my main point, he just login to Terminal then write his username and password and thats it .

this is to make him not able to run other commands except restarting his red5 service any time he needs.

But how could i finish that !

elkhedewy · 05-21-2013, 02:24 PM

Well,

i finished that by the following,

First created account

Then added this line at /etc/sudoers
username ALL = /etc/init.d/"service name"

Then
ln -s /bin/bash /bin/rbash

vim /etc/passwd
changed:
username:x:32012:32013::/home/username:/bin/bash

to
username:x:32012:32013::/home/username:/bin/rbash

Thanks