Preventing users from excute commands

camry · 06-02-2009, 03:22 AM

Dear All
I have RHEL5 box, I want to prevent all users from excuting a specific command "history -c" or history command in general, How can I do ?

Thanks

billymayday · 06-02-2009, 04:00 AM

History is an internal command, so I don't think you can do it directly. You could put a dummy alias in each user's .bashrc though to execute some useless command.

unSpawn · 06-02-2009, 05:36 AM

Functions supersede aliases and are searched for before builtins. Setting the alias in the users shell resources enables users to muck with it so better use system-wide /etc/profile.d/. The question remains though what the reason is for requiring this anyway. If this is about preserving history I'd point to 'rootsh' (again).

Valery Reznic · 06-03-2009, 11:38 AM

Quote:

Originally Posted by unSpawn

Functions supersede aliases and are searched for before builtins. Setting the alias in the users shell resources enables users to muck with it so better use system-wide /etc/profile.d/. The question remains though what the reason is for requiring this anyway. If this is about preserving history I'd point to 'rootsh' (again).

Any alias to command 'command' easily bypassed by user with

Code:

\command

But I failed to see what's a point of disabling history.

unSpawn · 06-03-2009, 12:21 PM

Both aliases and functions can be unset or bypassed. I kind of wondered the same and that's why I already asked "the question remains though what the reason is for requiring this anyway".