The tag has no usage guidance.

learn more… | top users | synonyms

19
votes
7answers
3k views

Which access rights can't the superuser violate?

Fr. Br. George told in one of his lectures (it's in Russian) that there are some access rights that superuser can not violate. That is there are some access right which can forbid superuser doing ...
14
votes
3answers
982 views

Myth or reality: SELinux can confine the root user?

I read or heard somewhere (maybe in LinuxCBT's SELinux course; but I'm not sure) that there are online Linux servers, for which the password of the root user is also given. The Linux server is ...
2
votes
1answer
114 views

How can I run ssh-add on demand? Can it act as SSH_ASKPASS?

I want to ssh from user@local to user@remote several times per day with an encrypted SSH key, a situation which ssh-agent handles with a good trade-off between security and usability. I'd also like ...
3
votes
4answers
5k views

Permissions to deny SSH users from accessing other user's folders

I am currently running Fedora on a network computer, acting as a host to other users who will SSH into my terminal to do their work. However I realised that they are also able to access my /home ...
6
votes
2answers
1k views

Restrict particular applications from accessing certain files

Normally the private files stored in the home directory of a user can be accessed by applications running with the effective UID of the user. How can I restrict a particular application from accessing ...
3
votes
2answers
4k views

Chroot SFTP users who require access to multiple directories under same parent folder

I have a RHEL 6 server with a /Documents directory, and it has child directories 1 2 3 4 5.... right under the /Documents directory. Is it possible to create an SFTP chroot jail that only gives a ...
2
votes
1answer
110 views

Do root's supplementary groups behave differently than regular account ones for NFS shares?

OS: Linux CentOS 7, NFSv4 On one machine I exported an NFS share group-owned by the nfsgroup with 2770 privileges for group collaboration: groupadd -g 5000 nfsgroup chown nobody:nfsgroup ...
0
votes
1answer
1k views

Grant FTP access to specific directory

I have setup CentOS on a box on my local network and installed httpd, PHP, Webmin (and UserMin) etc. I opted for ProFTPd and have opened up ports for FTP, Webmin and Apache. I can now access Webmin ...