Re: How to setup an read-only user account for a whole server with useradd ?



Carsten Eishold <bumpy@xxxxxxxx>:
I want to setup an user SSH/telnet account with useradd. The user should have

- read-only permissions for ALL files on the server beginning with the root directory.

- write permission for recursively all files below the directory /user/home/newuser

How do I setup the account and the permissions correctly ?

That sounds like almost the default behaviour. Default install makes
lots of things executable by default, but trying to do root-ish things
results in failure because the things they try to do are not allowed
by permissions set on whatever they're trying to do it to. As a user,
I can /sbin/ifconfig, but try changing the routing table. You don't
have permissions for that.


--
Any technology distinguishable from magic is insufficiently advanced.
(*) http://blinkynet.net/comp/uip5.html Linux Counter #80292
- - http://www.faqs.org/rfcs/rfc1855.html Please, don't Cc: me.
.



Relevant Pages

  • Re: Published application - what rights does the user need
    ... I have tried to change the entire setup since the last ... I am missing something on permissions and the ... Apply Group Policy ... particular computer account and user account have Full control ...
    (microsoft.public.windows.server.active_directory)
  • Re: Problem Creating Directory
    ... This is a relatively known .NET bug or "feature"... ... I had already checked out the account and found ... > permissions to the root directory, not just the root of the website. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Security required to create object in ADAM
    ... without knowing more about your setup it's difficult to be specific. ... Ideally those permissions should be for specific object classes ... up an account and acl with the required attributes for that objectClass. ... is there a way to specify an acl for all objectClasses and not have ...
    (microsoft.public.windows.server.active_directory)
  • Re: Setup for non-standard e-mail setup.
    ... I already setup the "Send as" permissions and that part is working well. ... something a little less manual than selecting the account. ... the contactus account. ...
    (microsoft.public.windows.server.sbs)
  • Migration from 5.5 to 2000
    ... everything was fine, setup /forestprep, setup /domainprep ... to update 5.5 or to add a server, the account youre logged ... I have tried to change my permissions betwen admin, ...
    (microsoft.public.exchange2000.setup.installation)