User access restriction in centOS 5 to run single script only.

farhanzahidi · 06-20-2009, 10:47 AM

Hi there,

Can anyone help in setting a user with a no privilege to run /bin /sbin and /usr/sbin commands.

I am able to restrict the directory navigation using /bin/rbash shell, however not finding the way to restrict the user to execute the system command like rm -rf, netstat, top etc

the user needs to be able to login to shell via SSH and execute one script like /home/frank/test.pl which is 755.

any help is appreciated!!!

thanks,
kfz

jhcaiced · 06-20-2009, 11:38 AM

Hi,

Some ideas about doing that:
- You can modify the user's shell to test.pl so that script is
executed when the user log in and the user is logged out
after the script is done.
- If the user log in by ssh, you can configure a key based authentication
which allows to run only the test.pl script.
- You can setup a chroot for that user with just the test.pl script.