you may also try rbash as a shell type (in /etc/passwd), it is not super secure, and people can still use their own binaries, but you can restrict them to their own home directory and whatevers in their path. Its lazy persons way out of doing chroots for all. more info in the man for bash
VRT <-- underpants on his head On Thu, 2003-01-23 at 14:39, Rolf Kutz wrote: > * Quoting DEFFONTAINES Vincent ([EMAIL PROTECTED]): > > > 2. Mount /home, /tmp and any other place users might have write access on > > with the "noexec" switch, so they can only use binaries installed (and > > allowed to them) on the system. > > This does not prevent them from executing > binaries. This has been discussed here before. > > - rk > > -- > "What sort of person," said Salzella patiently, "sits down and writes a > maniacal laugh? And all those exclamation marks, you notice? Five? A > sure sign of someone who wears his underpants on his head. Opera can do > that to a man." > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] >
