On Thu, 2003-06-19 at 17:43, Ken Godee wrote:
> Haven't actually tried it but.....
> 
> Couldn't you do it with symbloic links to the binaries?
> In other words have multitable sym links with permissions set
> for the individual groups pointing to the binaries.
> 
> Sounds messy......
> 
> Haven't looked into it lately, but what you really want is......
> Extended attributes and access control lists. 

A simpler solution is to have a group for each application, eg

addgroup evolution
chgrp evolution /usr/bin/evolution 
chmod a-x /usr/bin/evolution
chmod g+x /usr/bin/evolution

Repeat that for every application you want to restrict.

Then add each user to the appropriate groups.  A single use can belong
to many groups, so for example you might do this:

usermod dongsheng -G evolution,galeon,gcc,vim,mozilla

On Red Hat, "usermod -g" sets a user's primary group.  There can gbe
only one primary group, which almost always should match the user's name
(eg, the default is "usermod dongsheng -g dongsheng").  "usermod -G"
sets a user's secondary groups.  List all of the groups together, with
no spaces, separated with commas.

-David


-------------------------------------------------------
This SF.Net email is sponsored by: INetU
Attention Web Developers & Consultants: Become An INetU Hosting Partner.
Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php
_____________________________________________________________________
Ltsp-discuss mailing list.   To un-subscribe, or change prefs, goto:
      https://lists.sourceforge.net/lists/listinfo/ltsp-discuss
For additional LTSP help,   try #ltsp channel on irc.freenode.net

Reply via email to