The tag has no usage guidance.

learn more… | top users | synonyms

23
votes
6answers
23k views

How do I completely disable an account?

How do I completely disable an account? passwd -l will not allow anyone to log into an account using a password but you can still log in via private/public keys. How would I disable the account ...
0
votes
2answers
47 views

How to limit users permissions to only use mysql

Is it possible to create users (non-sudoers) that can only use the command "mysql" ? or set of commands ? Context: I have a server hosting a mysql database. I want to give some users the rights to ...
2
votes
2answers
45 views

Dialog Script break sequence

I am trying to create a console based menu for sshing to devices within our network, but I don't want the user to be able to break out of the menu. Would dialog work in this case? If not do I have any ...
3
votes
1answer
42 views

Force login through ssh only

I have a small problem. I have two accounts on a PC. One is used for "normal" operations, usually through the graphical interface, the other is only used for remote management (upload files through ...
0
votes
0answers
41 views

Restrict Users to their home directory

I use WebMin/ProFTPD on my CentOS7 VPS. I already checked the proftpd.conf and it contains the line: DefaultRoot ~ !adm But when I create a new user they can access all on the server from the root. ...
0
votes
0answers
34 views

Permission/Ownership issue with secondary FTP account

I have Centos 6.5 final. I have chroot setup and working properly and I also installed vsftpd. I now need to create a new user named extDeveloper and give this user access to a specific account. I ...
21
votes
5answers
13k views

Block Particular Command in Linux for Specific user

How to block command, let say mkdir for specific user ? What I did just created read-only function and store in users profile ~/.bashrc /bin/mkdir() { echo "mkdir command not allow for you" ...
0
votes
0answers
22 views

How do I add a vim configuration to a user who is restricted to a specific directory?

So basically, I have created a user that only has access to a specific folder with: useradd --home /some/dir username Now what I would like to do is add my vim configuration to this user's "home" ...
0
votes
0answers
82 views

Set vsftpd user to use specific folder only

How do I set a specific user to use only one folder? Problem is, it's a Windows share, mounted to /media/ftpshare. I want to create an FTP user who will access only that folder. I have tried to edit ...
0
votes
0answers
37 views

Workaround for running privileged commands from www-data user

I would like to append a string to a file located in /tmp/ from a php script. The command I would like to execute is: sudo sed -e 's/$/,yes/' -i /tmp/a.csv The Problem I can't run a sudo command ...
0
votes
0answers
490 views

can't find my user name in /etc/passwd nor name of my initial group in /etc/group

Here is what i get: [zehu@danville ~]$ groups apl vboxusers [zehu@danville ~]$ [zehu@danville ~]$ grep zehu /etc/passwd [zehu@danville ~]$ [zehu@danville ~]$ grep apl /etc/group [zehu@danville ~]...
2
votes
2answers
165 views

Limit a user to his own home directory

I have a user who can even use sudo. I want to limit his access to his home directory only. nothing else at all. I created a group ' limited ' and moved him to this group. Now What? How shall I ...
3
votes
2answers
362 views

How can I set up one-way scp?

I've got a remote server my.server.com and I'd like to allow another user (stranger) to scp files onto the box. Goals: give as little access to the stranger user as possible stranger should not be ...
1
vote
3answers
122 views

Debian - Disable console access for specific user

I have a server with a git server running on it. I would like git users to be able to clone, push and pull using their linux username and password, but not to be able to login to linux console. If I ...
3
votes
2answers
106 views

Creating a user having only access to folder & sub-folder which is present in other user of the same System

I have 2 users on my ubuntu system, User1 and User2. I have a directory(folder) in User1 as /home/User1/Software and I want to set this Software folder as home directory of User2 so that whenever ...
0
votes
1answer
303 views

Creating a new FTP user and giving him only the right to 1 folder [duplicate]

I have a Linux Debian machine that I own (root access). I would like to create a new user called "testuser" and give him the right to view, edit and delete files from only one specific folder ...
12
votes
2answers
40k views

How to add a ssh user who only has permissions to access specific folder?

How to add an ssh user who only has permissions to access specific folder? useradd -d /var/www/xyz.com.tr/musteri -s /bin/bash -g sshd musteri I created a user called musteri. I set its home ...
2
votes
0answers
143 views

Restrict SFTP users to different directories

How can I restrict some users/groups to some directories? I mean different users, different directories. What I have: Ubuntu 14. Experience with Ubuntu: Just started. What I have tried: I read ...
2
votes
2answers
1k views

Create guest account with restricted access to applications

I'm trying to create a guest account in arch linux that only allows the user to use simple applications like firefox. I do not want them to have access to programs like terminal or grub-customizer etc....
8
votes
2answers
3k views

Restrict password-less backup with SFTP

I need to perform backup of a server to my computer using Duplicity: duplicity /etc sftp://backup@my.dynamic.ip.address//home/backup Before this can be done, I need to allow password-less access by ...
1
vote
0answers
23 views

Restrict all FTP Accounts to a single directory [duplicate]

I am trying to restrict all FTP users to the directory /jannik with the vsftp-daemon. I don't want them to go anywhere but the folder /jannik and it's sub-folders. Also, I don't want them to have ...
-2
votes
2answers
92 views

How to prevent selected users from using “newgrp” with a password [closed]

I'd like to know how can I avoid add some users to a group? I need to avoid some users join to a group --I want to lock a group from some users, not all. Details lgroupmod -L dba ==> This ...
24
votes
4answers
162k views

Limit FTP access only to the /var/www with vsftpd

I am running vsftpd as ftp server on my linux (rasbian), I log in to the machine as a root user. I would like to be still locked to using only /var/www, how can I configure vsftpd conf to accomplish ...
1
vote
0answers
27 views

Allow move but not put in internal-sftp

is it possible with the internal-sftp to allow mv command from dir A to B but not allow put to A?
2
votes
2answers
2k views

chroot ssh users to home directory

How can one chroot ssh users to their home directories? This is what i have set in my sshd_config file: ChrootDirectory %h Subsystem sftp /usr/libexec/openssh/sftp-server ssh version is ...
1
vote
2answers
74 views

Disallow `apt-get`, `yum` to install setuid binaries when itself run via sudo

Assume you can install something on a system because you have sudo rights to do so, but only have sudo rights for the installer. In that case it is fairly easy to create a package that installs a ...
6
votes
6answers
23k views

How can I create and grant a normal user with root privileges?

I'm wondering how to create and grant a normal user (for example, named 'sybase') with root privileges? I found useradd, adduser, and passwd to be useful, but are there any other files to modify to ...
2
votes
2answers
5k views

Linux can't recognize the right password when ssh'ing?

I've created a local port forwarding and I was trying to ssh into my own port. During the process, I found that my own Linux won't recognize me even when I have the right password chulhyun@chulhyun-...
3
votes
0answers
202 views

Restrict the maximum number of independent IP connection on specific port at the same time

I set up a server as a socks5 proxy. I'd like restrict the maximum number(1 or 5 or 20) independent IP connection on specific port at the same time. I have searched on google, only see some articles ...
0
votes
1answer
57 views

Restrict SSH users to SFTP

How to configure an SSH server to only allow users to transfer files using the SFTP protocol, without being able to log in with their username ? Note: If the user's shell to nologin or null is not ...
2
votes
0answers
211 views

Restrict SSH access to git usage only

Using: ssh-keygen -O force-command="/bin/restricted-command", or command="/bin/restricted-command" at the beginning of an authorized_keys line one can force a key-based SSH connection to execute ...
1
vote
3answers
4k views

Can a command be executed over ssh with a nologin user?

If a user has loginShell=/sbin/nologin is it still possible to ssh user@machine [command] assuming that the user has proper ssh keys in its home directory that can be used to authenticate? My ...
23
votes
2answers
10k views

Do you need a shell for SCP?

I'm allowing a friend a local account on my machine, exclusively for SCP. Can I specify his account's shell as /bin/true, or in any other way limit the account, while still allowing SCP?
5
votes
3answers
3k views

Restrict user access in linux

I'm creating a new user with the following details: useradd -d /var/www/html/testuser.com -G users testuser I proceed by creating a new password for the user and attempt to login via SSH, I land on ...
7
votes
3answers
285 views

Restrict the times a user is allowed to log in

We have several Backbox 3.13 systems built on Ubuntu 12.04. One of my teenagers does not understand the concept of this thing called "sleep" and tends to get up to play on the computer. I'm trying to ...
0
votes
1answer
46 views

How to create user with only SSH permissions [duplicate]

I need to create a user which can SSH to a server, but can not run any commands or view anything, for the purposes of tunneling the connection without risk of revealing credentials. How do I do this? ...
3
votes
1answer
139 views

Is there an alternative to using rbash to restrict a user on my system?

Basically at the moment I am using rbash to stop a user from leaving his directory on my system. The problem with this is, there is a script in my bin which he needs to be able to run from a script in ...
11
votes
2answers
4k views

How to restrict an SSH user to only allow SSH-tunneling?

How can I restrict a user on the ssh server to allow them only the priviledges for SSH TUNNELING? i.e. So they cannot run commands even if they log in via ssh. My Linux servers are Ubuntu 11.04 and ...
1
vote
0answers
124 views

Is it possible to edit vsftpd.conf giving ftp access to an user to only a few directories inside the server?

I want to know if a user can access multiple directories in a ftp server and no other directories. I want access to more than 1 directory. I know how to restrict access to a single directory by giving ...
4
votes
0answers
221 views

What default shell to use for an SSH user limited to a single command

When limiting a user to a single command via ssh, what default shell should be used for the user? This is a follow up to how can shellshock be exploited over SSH? I have a machine that is running an ...
0
votes
0answers
75 views

Create a user who cannot explore system directories

I have a Centos 6.5 machine. I add users with useradd username. These users cannot browse other users directory, but they can browse all the OS filesystem starting from / and see configuration, ...
3
votes
2answers
285 views

SSH Bash Jail Session

I've seen some game tunneling service providers that jails the customer's account to a Information screen upon login and any input is ignored. Ctrl+C closes the SSH session, and disconnecting. This ...
1
vote
1answer
114 views

How to create a SOCKS only group?

I am currently trying to set up a user group that can connect to a server over SSH but only proxy through it. They can't see any files or run any commands. Users in the group would also be able to use ...
0
votes
0answers
57 views

User that can be accessed only from other user account

I have a number of users (23) but I want to create another user that can be accessed only from one of the user account to do some specific task. How can I do it. And obviously this user cannot be root....
3
votes
1answer
399 views

How can I lock down a user account to the point that it can read/write/execute as little as possible?

I would like to lock down an Arch Linux user account to the maximum extent possible. The only functionality required for the account is to accept a non-terminal SSH session which allows the client to ...
4
votes
0answers
215 views

Restricting access to just CVS and Git commands

At work we have a server which hosts our CVS repository and in order to restrict shell access to this system, I have deployed rssh which has worked well for a number of years. We are now converting ...
2
votes
1answer
39 views

Absolutely jail a user with minimum IP, file, & command rights

I am trying to secure a custom application as much as possible from outside tampering. I've seen many pages on jailing a user, but they usually include many exceptions, and I want to lock down this ...
2
votes
1answer
156 views

What commands does git use when communicating via ssh?

Using command="" in authorized_keys, I can restrict the commands that can be run by a particular key. What commands do I need to allow in order to have a functioning git remote? From the Pro Git ...
2
votes
1answer
1k views

Block local (unix) users from sending mail

Is there a way to block a local/unix user (or a list of local users) from sending mails via mail command (or maybe even in postfix, which is the MTA I have).
1
vote
2answers
790 views

Create a user that can only connect to a specific directory

I've created a SSH folder for some friends. I've created the users to log in via SSH, but they connect to ~ how can I set to which folder they can connect? I have a directory called /usbdrv/ which ...