Re: [CentOS] Restricting User Rights massively

2008-07-31 Thread Nifty Cluster Mitch
On Tue, Jul 29, 2008 at 05:59:37PM +0200, Dirk H. Schulz wrote: Thanks to all whio helped - rbash seems to be a good starting point since selinux is quite complex and takes some time to get into. Dirk In this same list is a discussion worth a review. [CentOS] Re: securing rsync over

[CentOS] Restricting User Rights massively

2008-07-29 Thread Dirk H. Schulz
Hi folks, is it possible to restrict the rights of a user to only do few, defined actions, e.g. only look up cpu and memory usage, but not walk around in the file system, not see any other hardware details, run any binaries/scripts? I know several different techniques to achieve parts of this

Re: [CentOS] Restricting User Rights massively

2008-07-29 Thread Ignacio Vazquez-Abrams
On Tue, 2008-07-29 at 13:05 +0200, Dirk H. Schulz wrote: is it possible to restrict the rights of a user to only do few, defined actions, e.g. only look up cpu and memory usage, but not walk around in the file system, not see any other hardware details, run any binaries/scripts? I know

Re: [CentOS] Restricting User Rights massively

2008-07-29 Thread William L. Maltby
On Tue, 2008-07-29 at 13:05 +0200, Dirk H. Schulz wrote: Hi folks, is it possible to restrict the rights of a user to only do few, defined actions, e.g. only look up cpu and memory usage, but not walk around in the file system, not see any other hardware details, run any binaries/scripts?

Re: [CentOS] Restricting User Rights massively

2008-07-29 Thread Sean Carolan
IMO, this is easier to setup than selinux, *may* meet all your needs and will not be affected by upgrades. I would agree with this. Try just creating a user with rbash as his login shell and then sudo /bin/su - username. Poke around and see what you are able to do, and you'll find out if it

Re: [CentOS] Restricting User Rights massively

2008-07-29 Thread Dirk H. Schulz
Thanks to all who helped - rbash seems to be a good starting point since selinux is quite complex and takes some time to get into. Dirk --On 29. Juli 2008 09:40:31 -0400 William L. Maltby [EMAIL PROTECTED] wrote: On Tue, 2008-07-29 at 13:05 +0200, Dirk H. Schulz wrote: Hi folks, is it

Re: [CentOS] Restricting User Rights massively

2008-07-29 Thread Nifty Cluster Mitch
On Tue, Jul 29, 2008 at 05:59:37PM +0200, Dirk H. Schulz wrote: Thanks to all who helped - rbash seems to be a good starting point since selinux is quite complex and takes some time to get into. Dirk --On 29. Juli 2008 09:40:31 -0400 William L. Maltby [EMAIL PROTECTED] wrote: On