LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Ubuntu
User Name
Password
Ubuntu This forum is for the discussion of Ubuntu Linux.

Notices


Reply
  Search this Thread
Old 01-07-2007, 03:28 PM   #1
rastavideo
Member
 
Registered: Jan 2003
Location: Texas
Distribution: Ubuntu
Posts: 66

Rep: Reputation: 15
restricting Firefox to a group


In Kubuntu -- How do I attach a group I have made to the Firefox application? I need to give access to Firefox to just three users.

Where is the actual Firefox application located? I have seen all the CLI stuff for groups and I understand that; I can't seem to figure out the directory location for the application.

Sorry for such a basic question, but I am rusty ...

thx
 
Old 01-07-2007, 03:39 PM   #2
handydan
Member
 
Registered: Mar 2005
Location: palmdale, california
Distribution: MEPIS 8; Debian (stable/testing)
Posts: 83

Rep: Reputation: 23
locaton of firefox

Try /usr/bin.
I'm not running Kubuntu (anymore) but Mepis is pretty close and that's where it is on mine....
 
Old 01-07-2007, 04:14 PM   #3
reddazz
LQ Guru
 
Registered: Nov 2003
Location: N. E. England
Distribution: Fedora, CentOS, Debian
Posts: 16,298

Rep: Reputation: 77
To find out the location of an executable, you do something like
Code:
$which firefox
Some distros name firefox "mozilla-firefox", so try that if the above does not work.
 
Old 01-07-2007, 04:59 PM   #4
rastavideo
Member
 
Registered: Jan 2003
Location: Texas
Distribution: Ubuntu
Posts: 66

Original Poster
Rep: Reputation: 15
The app seems to be in /usr/bin/firefox

But now I'm getting this :

synergy@KLDT:~$ chgrp firefox /usr/bin/firefox
chgrp: changing group of `/usr/bin/firefox': Operation not permitted

This is the admin account I'm using; I have forgotten if it's the same as root on other distros...
 
Old 01-07-2007, 05:15 PM   #5
handydan
Member
 
Registered: Mar 2005
Location: palmdale, california
Distribution: MEPIS 8; Debian (stable/testing)
Posts: 83

Rep: Reputation: 23
admin account

Quote:
Originally Posted by rastavideo
The app seems to be in /usr/bin/firefox

But now I'm getting this :

synergy@KLDT:~$ chgrp firefox /usr/bin/firefox
chgrp: changing group of `/usr/bin/firefox': Operation not permitted

This is the admin account I'm using; I have forgotten if it's the same as root on other distros...
If memory serves, the Ubuntus all restrict root logins by default.
Have you tried
Code:
sudo chgrp firefox /usr/bin/firefox
BTW, I don't know what you have in mind for a group name, but unless you are changing (application) firefox to group firefox, the chgrp command you show doesn't seem to makes sense to me.
But then a lot of things about life don't make sense to me....;-)
 
Old 01-07-2007, 05:18 PM   #6
fragos
Senior Member
 
Registered: May 2004
Location: Fresno CA USA
Distribution: Ubuntu 10.10
Posts: 1,466

Rep: Reputation: 51
try "sudo chgrp firefox /usr/bin/firefox" and you'll be asked for your password. In Ubuntu and derivatives you down have an su command to change to super user. In this case there isn't a root login and password. If you're a member of the admin group you preceed command lines with sudo if the permissions are root.
 
Old 01-07-2007, 05:27 PM   #7
rastavideo
Member
 
Registered: Jan 2003
Location: Texas
Distribution: Ubuntu
Posts: 66

Original Poster
Rep: Reputation: 15
Tried the following but seems same as before:

synergy@KLDT:~$ sudo chmod 770 /usr/bin/firefox
Password:
synergy@KLDT:~$ sudo chgrp firefox /usr/bin/firefox
synergy@KLDT:~$ ls -l /usr/bin/firefox
lrwxrwxrwx 1 root root 22 2007-01-06 14:40 /usr/bin/firefox -> ../lib/firefox/firefox

It's got to be something I'm doing, but I can't imagine what it is ... Any thoughts?

thx
 
Old 01-07-2007, 05:36 PM   #8
reddazz
LQ Guru
 
Registered: Nov 2003
Location: N. E. England
Distribution: Fedora, CentOS, Debian
Posts: 16,298

Rep: Reputation: 77
It seems like /usr/bin/firefox is just a symlink to /usr/lib/firefox/firefox. Check the permissions and ownership for /usr/lib/firefox/firefox.
 
Old 01-07-2007, 05:55 PM   #9
handydan
Member
 
Registered: Mar 2005
Location: palmdale, california
Distribution: MEPIS 8; Debian (stable/testing)
Posts: 83

Rep: Reputation: 23
Yup...

Quote:
Originally Posted by reddazz
It seems like /usr/bin/firefox is just a symlink to /usr/lib/firefox/firefox. Check the permissions and ownership for /usr/lib/firefox/firefox.
I think you're right. On my MEPIS system anyway, ls -l shows it to be a symlink. Never noticed that before...
 
Old 01-07-2007, 06:26 PM   #10
IndyGunFreak
Senior Member
 
Registered: Aug 2003
Location: Indpls
Distribution: Laptops: Debian Jessie XFCE, NAS: OpenMediaVault 3.0
Posts: 1,355

Rep: Reputation: 70
Here's how I did it, your instructions may vary slightly with Kubuntu/KDE(I did it with Ubuntu and Gnome)... I really wasn't sure how to do this, so I created a dummy account and completed the process. If you already have the accounts set up, you'd probably only need to modify those accounts, as opposed to create a new account.

Just to be safe, any changes you make, note them, so if something goes haywire, you can go back and change them back to their original settings, but I had no noticeable problems.

Open a terminal
sudo nautilus
passwd
navigate to usr/bin
right click the Firefox link, choose Properties
Permissions(here's what mine looks like)
owner- root -Read/write
group indygunfreak(more or less my admin group)-read only
others none
Accept any changes...

System>Admin>Users and Groups

Create your account(or if it already exists, highlight, click Properties)
Click the User Privileges tab- make sure Administer the System is unchecked
Advanced Tab- Group(for me) is Users

Accept all your changes.

Log out and back in to one of the restricted accounts, and see if it worked. Note, this only restricted access to Firefox, Opera and Konq(the other two browsers on my sistem), still worked w/o issue.

Anyone with more experience than I, with a comment/concern? This seems to have done the trick.

IGF

Last edited by IndyGunFreak; 01-08-2007 at 08:58 AM.
 
Old 01-07-2007, 07:55 PM   #11
rastavideo
Member
 
Registered: Jan 2003
Location: Texas
Distribution: Ubuntu
Posts: 66

Original Poster
Rep: Reputation: 15
Thanks to all for the help ... it works. I got it restricted for use by those in the group. The symlink comment was dead-on --- I was working on a link, not the real app. And thanks to IndyGF for working thru it !

have a great week ## rasta
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
group: add complete group into other group max_mad SUSE / openSUSE 1 04-12-2006 01:43 AM
Restricting a group from going online thomasfingram Linux - Newbie 1 08-11-2005 05:05 PM
Group Admin, Group Root, or God over Group crickett Linux - General 5 07-12-2004 04:01 PM
User Group for Restricting Internet Access kyleinc Linux - General 6 04-17-2004 05:49 AM
[alert] (22) Invalid argument : setgid : unable to set group id to Group 4294967295 Niraj Linux - Networking 1 12-13-2001 06:58 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Ubuntu

All times are GMT -5. The time now is 01:35 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration