Need help with Access Control Lists

GUIPenguin · 01-06-2006, 07:34 AM

http://www.djack.com.pl/Suse9hlp/ch27s03.html was what I was looking at..but I didn't really find the information I needed. I have emerged acl

Now what exactualy should I do for blocking read access to /etc for a specific, non-root user so he can't cd /etc

I know it is possible.

aqoliveira · 01-06-2006, 07:46 AM

Quote:

Originally Posted by GUIPenguin

http://www.djack.com.pl/Suse9hlp/ch27s03.html was what I was looking at..but I didn't really find the information I needed. I have emerged acl

Now what exactualy should I do for blocking read access to /etc for a specific, non-root user so he can't cd /etc

I know it is possible.

There are various ways in doing this but I think you could try chroot login. Essentially what this means is that when a log in is attempted, the user is authenticated in the normal way. After successful authentication, the login process passes the user to what it assumes is a shell, but in fact, it will be passing the user to a sieries of programs that will turn the user into root, chroot them into their directory, then turn the user back into himself again.

http://www.tjw.org/chroot-login-HOWTO/

cheers

GUIPenguin · 01-06-2006, 07:49 AM

Quote:

Originally Posted by aqoliveira

There are various ways in doing this but I think you could try chroot login. Essentially what this means is that when a log in is attempted, the user is authenticated in the normal way. After successful authentication, the login process passes the user to what it assumes is a shell, but in fact, it will be passing the user to a sieries of programs that will turn the user into root, chroot them into their directory, then turn the user back into himself again.

http://www.tjw.org/chroot-login-HOWTO/

cheers

thanks.. I know how to do chrooted environments for my users but want to use acls to limited more specific directorys... so if anyone knows how to do it specificly please post. Thanks.