3
votes
2answers
71 views

Denying “/opt/” access for SFTP Users other than particular dir

This is my first (newbie) post here in unix stackexchange. I want to use my WebServer (Debian) as SFTPServer giving access to particular employees. The dir structure is as follows under root: ...
16
votes
4answers
2k views

Block Particular Command in Linux for Specific user

How to block command, let say mkdir for specific user ? What I did just created read-only function and store in users profile ~/.bashrc /bin/mkdir() { echo "mkdir command not allow for you" ...
2
votes
1answer
699 views

SFTP: give user access to folder outside home

I have a machine running Ubuntu 12.04 LTS with OpenSSH server installed. I have created a user with a jailed home account. When I log in with the user's account, I can only access his home (duh). ...
3
votes
1answer
530 views

How to “jail” a user account's network capabilities on Linux?

Linux box a is connected to a home DSL line with dynamic DNS registration, hosting a tmux session to which multiple clients connect in read-only mode over SSH. All users connect using the same ...
5
votes
1answer
332 views

Is it safe to use /bin/cat as shell for a restricted user?

I need to remontely log on to few peoples machines to do maintanance tasks, but sometimes the machines can be behind firewalls or NAT's. The way I have been doing it is to give the user advice on how ...
3
votes
0answers
130 views

Restricting sound control

I need to restrict users so that they cannot output sound from built-in speakers. They should plug their headphones to hear any sound. They should be able to control headphone volume level, but not ...
3
votes
1answer
128 views

What is the best way to restraint/secure a workstation?

I want to prevent users to copy on usb devices and some others actions. I was thinking of using polkit. Do you think it is a good solution or does someone know some alternatives ? EDIT: I also need ...
2
votes
5answers
1k views

Create new linux account as a user without root access

Is it possible to create a non-root Linux user account without being logged in as a root user and without using sudo?
5
votes
4answers
15k views

How can I create and grant a normal user with root privileges?

I'm wondering how to create and grant a normal user (for example, named 'sybase') with root privileges? I found useradd, adduser, and passwd to be useful, but are there any other files to modify to ...
8
votes
2answers
2k views

How to restrict an SSH user to only allow SSH-tunneling?

How can I restrict a user on the ssh server to allow them only the priviledges for SSH TUNNELING? i.e. So they cannot run commands even if they log in via ssh. My Linux servers are Ubuntu 11.04 and ...