Re: [gentoo-user] Creating a restricted user

2007-12-13 Thread Mick
On Wednesday 12 December 2007, Dirk Heinrichs wrote: Am Mittwoch, 12. Dezember 2007 schrieb Grant: I've noticed when adding this kind of a user in the past they are able to look at files all around the system that I'd prefer they can't. Why? System directories look nearly the same on any

Re: [gentoo-user] Creating a restricted user

2007-12-12 Thread Dirk Heinrichs
Am Mittwoch, 12. Dezember 2007 schrieb Grant: I don't want the user to be able to do much of anything but browse the web, use skype, and maybe look at photos on a CD or something. Maybe what you want can be achieved by running KDE in kiosk mode. However, never did this myself, so you should

Re: [gentoo-user] Creating a restricted user

2007-12-12 Thread Dirk Heinrichs
Am Mittwoch, 12. Dezember 2007 schrieb Nangus Garba: if you want to make it so that a user can not look at a directory such as /var you can use a command such as: chmod o-x /var No, don't do this. Don't mess with permissions of system directories. Better use ACLs. Bye... Dirk

[gentoo-user] Creating a restricted user

2007-12-11 Thread Grant
I'd like to create a really restricted user on my laptop. I don't want the user to be able to do much of anything but browse the web, use skype, and maybe look at photos on a CD or something. I did this: useradd -m -G users,audio,cdrom -s /sbin/nologin newuser How does that look? I've noticed

Re: [gentoo-user] Creating a restricted user

2007-12-11 Thread Nangus Garba
if you want to make it so that a user can not look at a directory such as /var you can use a command such as: chmod o-x /var basically that takes away execute privileges for other. Basically what happens when you run the ls command it executes the directory. You can do that for each directory

Re: [gentoo-user] Creating a restricted user

2007-12-11 Thread Nangus Garba
oh be really really really careful with this you can take away peoples access to libraries and executables and generally bork your system so be supper careful. nangus On Dec 11, 2007 10:19 PM, Nangus Garba [EMAIL PROTECTED] wrote: if you want to make it so that a user can not look at a