How to block a command from an account?

blong4life · 07-12-2009, 08:11 PM

Hello,

Is it possible to block 1 function from 1 account, such as "wget" from an account so that a user can't use it.

Thanks,
Brandon

karamarisan · 07-12-2009, 08:37 PM

More broadly, what's your real goal? Blocking wget would do nothing, for example; curl or any browser could all do the same thing.

jay73 · 07-12-2009, 08:42 PM

The most convenient solution would be to prevent users from installing it in the first place. Still, if they work on it, they could download the source code and install it inside their home directory. Unless you also block direct access to the internet. I would also recommend that you read man sudoers.
Other solution: monitor internet usage and pull their ears when you see suspicious amounts of data being transferred.

JosephMu · 07-12-2009, 09:28 PM

sounds like a very interesting question, how about change
.bashrc
and
chmod
and
chgrp
and
chown
????
just an shallow idea havn't try yet...

gapan · 07-13-2009, 11:48 AM

limited shell might be what you're looking for: http://lshell.ghantoos.org/

blong4life · 07-13-2009, 02:09 PM

Ok thanks for the advice all.

chrism01 · 07-13-2009, 11:47 PM

Look at ACLs, although as mentioned, there is always more than one way to do it... ie blocking wget will not solve your problem.