The tag has no wiki summary.

learn more… | top users | synonyms

4
votes
1answer
774 views

How to “jail” a user account's network capabilities on Linux?

Linux box a is connected to a home DSL line with dynamic DNS registration, hosting a tmux session to which multiple clients connect in read-only mode over SSH. All users connect using the same ...
2
votes
1answer
918 views

SFTP: give user access to folder outside home

I have a machine running Ubuntu 12.04 LTS with OpenSSH server installed. I have created a user with a jailed home account. When I log in with the user's account, I can only access his home (duh). ...
6
votes
1answer
851 views

Is it safe to use /bin/cat as shell for a restricted user?

I need to remontely log on to few peoples machines to do maintanance tasks, but sometimes the machines can be behind firewalls or NAT's. The way I have been doing it is to give the user advice on how ...
11
votes
1answer
915 views

Can I restrict a user to use special programs?

Is it possible to add a user and restrict him to run special programs? For example after this user logs in, he can only open Firefox to use Internet and no other programs can be run by this user. For ...
2
votes
1answer
538 views

root can only login with bash restricted mode

I was implementing a series of recommendations to 'harden' my linux server, involving lots and lots of changes. Linux is CentOS 6.2, kernel 2.6.32-220.*. I'm currently using tty2..tty5 (no X/GUI etc) ...
3
votes
0answers
137 views

Restricting sound control

I need to restrict users so that they cannot output sound from built-in speakers. They should plug their headphones to hear any sound. They should be able to control headphone volume level, but not ...
11
votes
3answers
1k views

Adding a user who can only execute scripts remotely

I would like to create a user who can only do one thing: via ssh specify a script ( and commandline arguments to the script ) that resides in one particular folder ( for the purposes of this question ...
3
votes
1answer
138 views

What is the best way to restraint/secure a workstation?

I want to prevent users to copy on usb devices and some others actions. I was thinking of using polkit. Do you think it is a good solution or does someone know some alternatives ? EDIT: I also need ...
7
votes
2answers
959 views

How to hinder root from running a script

The Glassfish application server provides scripts to administer the application server and also start and stop them and I would like to restrict the root user from running this script. The reason is ...
4
votes
2answers
5k views

Can I create a local only guest account?

Is it possible to create a "guest" account in Linux? by "guest" account I mean an account that does not require a password to log in graphically. I want this account for when people come over and are ...