LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 02-19-2004, 12:42 PM   #1
pjdepasq
LQ Newbie
 
Registered: Feb 2004
Location: NJ
Distribution: Mandrake 9.2
Posts: 5

Rep: Reputation: 0
Can't run programs/see files in man - MDK9.2


Hi,

I'm by no means a newbie here, but I just ran into something (simple?) I can't solve.

I have a Mandrake 9.2 box for my research with student (user) accounts. For a while, my account has been the only one on the machine and all has been well...

However, in creating new account yesterday for a new student in a new group, I tested the log in (tcsh), and found that I could not execute nearly anything "normal" (such as date, ls, etc.). Thinking it was a path issue, I saw the path was set correctly.

I struggled with this for a long time, and eventually set the shell to bash, which my (personal) account uses. Now, that user can execute a command, but when I tried to do a 'man' on a command (say 'man date'), the man pages find nothing.

I have no idea what the hell is going on here, but something weird certainly is.

Can this be an msec thing? How do I determine the current "level" of security I'm currently in, so that I can poke around with the settings?

What other things might I be missing? Does the new group need to have special permissions for basic fundamental activities? I've never run across this before...

(Also, I need to set up quotas for the newest users. How do I go about this? Is it a kernel switch/recompile? Is it a rpm? The machine does not run a window server, so I interface with it via the command line.)
 
Old 02-25-2004, 01:56 PM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
I struggled with this for a long time, and eventually set the shell to bash, which my (personal) account uses. Now, that user can execute a command, but when I tried to do a 'man' on a command (say 'man date'), the man pages find nothing.
User has access to regular stuff like man pages, slocate database, /usr tree?
If you do 'strace -v -eopen man date 2>&1|grep ".=.\-1."', what errors does it return?


Can this be an msec thing? How do I determine the current "level" of security I'm currently in, so that I can poke around with the settings?
Soz. Can't tell you. I ain't a Mandy user.


(Also, I need to set up quotas for the newest users. How do I go about this? Is it a kernel switch/recompile? Is it a rpm? The machine does not run a window server, so I interface with it via the command line.)
Rpm. Install it, set up /etc/quota.conf (and reporting cronjob), then initialise quota's on each partition you need quota's on.
 
Old 02-25-2004, 02:40 PM   #3
jschiwal
LQ Guru
 
Registered: Aug 2001
Location: Fargo, ND
Distribution: SuSE AMD64
Posts: 15,733

Rep: Reputation: 682Reputation: 682Reputation: 682Reputation: 682Reputation: 682Reputation: 682
I just set up an account on my computer with a security level of ¨higher¨. I am seeing the same thing you are. On the account that I use I set myself up as members of the groups:
adm, wheel, rpm, xgrp, ntools, ctools.
The account that I just created is a member of the groups: prog, wheel, games & ctools.

I did a google search for ntools group. Following is an excerpt from this website:
http://www.tldp.org/HOWTO/Linux+WinNT-7.html
Quote:
After that step was finished, and after entering password for root, setup asked to 'Enter a user' (an ordinary user). The difference between client and server installation was that the latter offered some additional tasks for the user:

- access to compilation tools (ctools)
- access to rpm tools (rpm)
- access to X programs (xgrp)
- access to network tools (ntools)
- access to administrative files (adm)
- allow "su" (wheel)
I believe that the track that you want to be on is to find out which group memberships allow which access right to users.
 
Old 02-25-2004, 11:35 PM   #4
jschiwal
LQ Guru
 
Registered: Aug 2001
Location: Fargo, ND
Distribution: SuSE AMD64
Posts: 15,733

Rep: Reputation: 682Reputation: 682Reputation: 682Reputation: 682Reputation: 682Reputation: 682
There is a program called ´adduserdrake´ that you might want to use when entering new users.

There are selection boxes for various group memberships that you can add to new user accounts as you enter them and a brief discription on what they allow. It´s a start I hope.

Good Luck!
 
Old 02-25-2004, 11:49 PM   #5
pjdepasq
LQ Newbie
 
Registered: Feb 2004
Location: NJ
Distribution: Mandrake 9.2
Posts: 5

Original Poster
Rep: Reputation: 0
Well, it would seem that the groups you folks have identified are the ones I need. Sadly, I can't find any docuementation on the full list of groups and what they do. Looks like I'll have to guess.

The adduserdrake program did start up via my tty terminal, but I could not get out of it and had to "CTRL-Z" to get out and then kill the process. Next time, I'll stick to webmin.

Finally quotas. URPMI -y can't find aynthing about 'quota'. Is there another package name for the RPM for the quota software?

Thanks one and all.
 
Old 03-01-2004, 07:38 PM   #6
jschiwal
LQ Guru
 
Registered: Aug 2001
Location: Fargo, ND
Distribution: SuSE AMD64
Posts: 15,733

Rep: Reputation: 682Reputation: 682Reputation: 682Reputation: 682Reputation: 682Reputation: 682
I am not sure but quota may be one of the core-utils. Try urpmf quota or urpmq quota. They may tell you which package that quotas is on.
 
Old 03-01-2004, 08:23 PM   #7
jschiwal
LQ Guru
 
Registered: Aug 2001
Location: Fargo, ND
Distribution: SuSE AMD64
Posts: 15,733

Rep: Reputation: 682Reputation: 682Reputation: 682Reputation: 682Reputation: 682Reputation: 682
If you download the user manual from the Mandrake site, I believe there is a section with that various groups are used for. Many of them are pretty standard, so googling may be fruitful.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
How to read DVI files in MDK9.1? akihandyman Mandriva 0 12-19-2003 09:26 AM
Man how do I install programs? The never work! dependencies :( Alkaline Mandriva 3 10-07-2003 09:21 AM
Most of the programs crash on Mdk9.1 senthil Linux - Software 2 06-13-2003 03:04 AM
Where are programs files and configuration files stored? nutshell Linux - General 2 03-09-2002 11:24 AM
Compiling packages on RH 7.1 causes man files to be named man.gz mmboam Linux - General 0 05-09-2001 07:47 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 06:25 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration