Re: How to setup an read-only user account for a whole server with useradd ?



In comp.os.linux.misc Carsten Eishold <bumpy@xxxxxxxx> wrote:

I want to setup an user SSH/telnet account with useradd. The user should have

- read-only permissions for ALL files on the server beginning with the root directory.

- write permission for recursively all files below the directory /user/home/newuser

How do I setup the account and the permissions correctly ?


With ACL's that would of course be trivial, but without ACL's about
all that comes to mind is creating a special group and chgrp'g
everything to that group. This sounds very ugly- and would quite
possibly break things such as mail and could very well mess
up all sorts of std security.

But maybe I'm missing something obvious that someone else will point out...

Stan
--
Stan Bischof ("stan" at the below domain)
www.worldbadminton.com
.