On Wed, Sep 9, 2009 at 3:15 PM, Govi<[email protected]> wrote:
> Hi,
>
> I want to restrict users normal command.i mean specified users must use only
> below command,
> cp
> mv
> dig
> telnet
> ssh
>
> other commands did n't accect,while running through the specified users.
> anybody have idea.

I like all ideas given by others and I may not get into
testing this thing due to lack of time. Though I shall
surely get to it as and when time permits and post to LUG. This could
even take a month. Anyway.

The first thought that occurred to me was  chroot with
just these commands. But chroot can only be done by root.

So you could have a "janitor daemon" that runs as root and
you could have users access these commands through a
janitor service. This is what I am doing in my SpamCheetah
product.

I know you can get a lot more creative and secure but this
seems like a good idea.

Along with all other ideas given by others.

-Girish
-- 
Gayatri Hitech
web: http://gayatri-hitech.com

SpamCheetah Spam filter:
http://spam-cheetah.com
_______________________________________________
To unsubscribe, email [email protected] with 
"unsubscribe <password> <address>"
in the subject or body of the message.  
http://www.ae.iitm.ac.in/mailman/listinfo/ilugc

Reply via email to