RE: Limiting User Commands

From: Benedict Verheyen (Benedict.Verheyen_at_sjki.be)
Date: 11/05/04

  • Next message: Greg Madden: "Re: 32-bit pcmcia in an old laptop?"
    Date: Fri, 5 Nov 2004 18:40:59 +0100
    To: <debian-user@lists.debian.org>
    
    
    

    >-----Oorspronkelijk bericht-----
    >Van: Stephen Le [mailto:zeroion@gmail.com]
    >Verzonden: vrijdag 5 november 2004 18:31
    >Aan: debian-isp@lists.debian.org; debian-user@lists.debian.org
    >Onderwerp: Limiting User Commands
    >
    >
    >Hello all,
    >
    >Is there an easy way to limit the commands a certain group of users
    >can execute? I've looked at chroot, and it's too complicated for my
    >needs and seems too easy to circumvent; users will be able to upload
    >their own Perl scripts, so it seems that they'll be able to access
    >commands outside their chroot by getting Apache w/ mod_perl to execute
    >the script.
    >
    >I'd like to be able to compile a list of commands/programs that users
    >in a certain group will be able to execute (ex. cp, mv, rm, etc).
    >However, I'd also be happy to compile a list of commands users
    >shouldn't be able to execute. In regards to the latter method, would
    >it be possible for me to change the group ownership of the commands I
    >don't want users to have access to and revoke execute permission from
    >that group?
    >
    >Thanks,
    >Stephen Le

    Sounds like you want sudo.

    Regards,
    Benedict

    
    

    ------=_NextPartTM-000-561ef7d7-81ff-40bb-ba2e-aaaec2bf7bf1--

    -- 
    To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org 
    with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
    


  • Next message: Greg Madden: "Re: 32-bit pcmcia in an old laptop?"

    Relevant Pages

    • [UNIX] Vulnerabilities Found in Scponly
      ... SSHd environment files. ... the user can upload a file with a custom ... This provides the user with a means of running arbitrary commands ... the user could execute arbitrary commands by uploading ...
      (Securiteam)
    • Re: [Full-disclosure] FWD Cisco IOS Remote Command Execution Vulnerability
      ... > Vulnerability Alert Cisco IOS Remote Command Execution ... > 9.4 Last Change Cisco has responded to this issue; ... > prone to an issue that may permit gay people to execute arbitrary ... > commands from a password prompt. ...
      (Full-Disclosure)
    • Dont mind if I grouse on some basic topics?? (very long)
      ... I know as experienced programmers you really don't want to hear people gripe ... and moan about basic, indeed critical topics, but I just have to vent on ... commands within a set sequence. ... doesn't appear to uniformly execute them. ...
      (comp.windows.x)
    • Re: Redirection issue
      ... 1- execute input commands from standard input, ... the phrase "it does not work anymore" carries very little meaning. ... after compilation and execution of the shell with a simple command like ...
      (comp.lang.c)
    • Re: Newbie
      ... I will now tell you some basic commands. ... Easy file has rights and a owner. ... file and who may execute it. ... The last three characters are about the permissions of user ...
      (alt.linux)