CentOS 5 :: Forbidden Users To Modify/unset A Env-var ?
May 18, 2009If a root user set an environment variable for users, how to let users not modify or unset the variable?
View 4 RepliesIf a root user set an environment variable for users, how to let users not modify or unset the variable?
View 4 Replies'readonly HISTFILE'
but the user could tamper with the histfile itself. Like:
rm -f $HISTFILE;
rm -f $HISTFILE; mkdir $HISTFILE;
rm -f $HISTFILE; ln -s /dev/null $HISTFILE;
I'm experimenting with PROMPT_COMMAND to execute a command each time the user executes a command and so log it somewhere else.This post was pruned from the 2009 Is there a way to prevent users from changing or unset their HISTFILE variable? thread. Please do not resurrect old threads but instead create your own (and maybe provide a link to the old one).
I have to create a script to identify those users who have un-sanctioned (forbidden) files in their home directory. I tried something like this (this is a try and I need some opinions):
Code: #!/bin/bash
user_belongs() {
if `groups $var1 | grep $var2`
then
return 0 else
return 1
fi
} .....
modify the panel for all users?
View 2 Replies View Relatedi've been wondering how do i know if some users create/modify/delete file/directory in linux, i've been using pyinotify in python script.this script like the example from the manual:
Code:
#!/usr/bin/python
import pyinotify, os, time
[code]...
I spent some time programming a useful script which presents the user with a UI of all the samba/W2K8 servers and shares on the domain and they check off the shares and the script maps them. The script can only be run as root because mount doesn't allow users to execute. I was asked to modify the script to allow non-root users similar features. I was able to get this working by running the commands:
Code:
# chmod +s /sbin/mount.cifs
# chmod +s /sbin/umount.cifs
Can someone please explain to me what the 's' option means? The man pages only go as far as to say that it allows for setting suid but I don't really know understand that means or what the implications are by doing this. In a perfect world I would like to create a security group and add users into that group and then grant that group permission to run mount.cifs/umount.cifs rather than making such a drastic global change to a core binary. how I might go about granting members of a group permission to run hand-selected commands like mount.cifs?
Post added at 07:07 PM Previous post was at 04:40 PM Ok, I read up on the /etc/sudoers man page and I think I have a more elegant solution to this problem of user mountable samba shares. I restored my mount.cifs back (chmod -s /sbin/mount.cifs) and I used visudo to grant the access.
Code:
%smbusers ALL=NOPASSWD:NOEXEC:/sbin/mount.cifs,/sbin/umount.cifs
This allows any users in the smbusers group to run mount.cifs/umount.cifs with sudo but without being prompted for a password.
I get "403 Forbidden You don't have permission to access" after attempting an installation of phpmyadmin.
CentOS 5.4
Permissions for directory set to 755 recursively (chomd -R 755 <directory name>)
Directory is in /var/www/html/
I have other test pages in the /var/www/html/ directory that I can access ... I know this seems like a permission issue and in fact the error log states this is a permission issue, but I cannot figure what is the problem here.
Basicly just installed a fresh version of Cent OS 5.4 with apache httpd installed automaticly during the installation. The http daemon is running and when navigating to localhost i get the welcome cent os apache page thingy. The problem is when i put an index.html file in /var/http/www then try and navigation to localhost I get a 403 forbidden error.
View 2 Replies View RelatedMy squid server works fine in fedora 11 system . Is there any web like interface for admins to create,change,modify users of squid and to view their logs.
View 1 Replies View RelatedAfter booting machine with CentOS 5. DVD, initrd.img will do some command to initialize everything to start installing CentOS. At this time, I need put some command so that I can enter some values and store them in a file. After finishing installation, Cent OS will read information from this file to do some tasks.I think I should modify initrd.img in Cent OS DVD but can not because this file is in binary (compiled file) .
View 2 Replies View RelatedWhenever I modify my pam file as shown below I can no longer log into my centos; I have to go into single user mode and undo the changes. What I want to do is log all failed authentication attempts but I don't want it to affect the root user account.
# vi /etc/pam.d/system-auth
auth required pam_tally.so no_magic_root
account required pam_tally.so deny=3 no_magic_root lock_time=180
I have two folders as :
drwxrwxrwx 2 root root 1368064 Mar 10 18:28 monitor
drwxrwxrwx 7 root root 12288 Feb 18 17:07 monitorDONE
I have created one short cut link for this folder with below command :
ln -s monitorDONE recordings lrwxrwxrwx 1 root root 11 Mar 13 14:30 recordings -> monitorDONE This link is under /var/www/html Now, when I do IP/recordings It show me an Error as Forbidden You don't have permission to access /recordings on this server.
I need to modify the ISO file by adding few files so that after all installation done I can run a sh script to do some thing on the box. How to do that?
View 4 Replies View RelatedI know if I run repquota -a I can see the quotas set for all users.How do I modify the quota for a specific user?So say the output for john is:User used soft hard grace used soft hard grace----------------------------------------------------------------------john.someth -- 122844 51200 51200 4995 0 0How do I make his block limits 0 so they are unlimited?
View 1 Replies View RelatedDoes anyone know if there is a way to "unset" processor affinity? So if you bind a process to just one proc, but then want to tell the OS to revert to normal behavior? Also, when you bind a process to a processor, can other processes use that process or does it have exclusive usage of that proc?
View 1 Replies View RelatedIf you set or export an environment variable in bash, you can unset it. If you set an alias in bash, you can unalias it. But there doesn't seem to be an unfunction.
Consider this (trivial) bash function, for example, set in a .bash_aliases file and read at shell initialization.
function foo () { echo "bar" ; }
How can I clear this function definition from my current shell? (Changing the initialization files or restarting the shell doesn't count.)
So far, I've been able to get my Box (Centos 5.3) authenticate users through LDAP. My next plan was to automount their home directory from our NAS device.But I'm struggling getting autofs talking to the LDAP Server.My Config Files:
/etc/ldap.conf
[root@tmplt_CentOS-5 ~]# egrep -v '^#|^$?' /etc/ldap.conf
base ou=intern,o=zde,dc=simiangroup,dc=com
[code]....
This is related to http://superuser.com/questions/27376/why-does-my-ld-library-path-get-unset-launching-terminal, but a different set of symptoms.First, /usr/bin/screen is setuid as per the other question. Second, the default shell on this system is /bin/tcsh for various historical reasons, and we're not allowed to chsh to /bin/bash, so I typically run bash manually immediately after login. Third, I almost always use screen, but I want ctrl-a ctrl-c in screen to create a new bash "tab", so I always invoke bash first.
That is:
{~} $ echo $SHELL
/bin/tcsh
[code].....
I use my laptop through a proxy and at home I don't. I've set the proxy at uni using export http_proxy="...", as well as ftp and https proxies. Now I'm at home, I go to unset them by typing export http_proxy="" and that works, until I close and reopen terminalwhere "export" shows the proxy still set
View 1 Replies View RelatedI am installing Big Brother on a CentOS 5.2 running the default Apache 2.2.3. When I try to access any web page I get the following error: Forbidden You don't have permission to access /bb/ on this server. Apache/2.2.3 (CentOS) Server at fmsubbnix Port 80 So far I have:
1) Set the Directory options to FollowSymLinks
2) Verified all directory and file permissions are at 755
3) Set permissions temporarily to 777 and received same error so I am assuming the issue is in a config file somewhere
4) in hhtpd.conf verified <Files ~ "^.ht"> is correct
5) verified the "default" directory is correct (/var/www/html)
I have read and tried several ideas in posts listed on the web but to no avail and am at a loss as to what to look for next..
I've got new version of grub from the newest linux. Do you know how to disable quiet booting ? Because I've got problem with my graphics card and to fix it I need recovery mode.
View 1 Replies View RelatedFor some reason it seems like my Thunderbird 3.x has a limit of 80 chars per line enabled, so when I edit a message, it puts a line feed on or before that limit.
I think it could be set when I installed Enigmail for using GPG, that changes some default values, but I'm not sure.
Anyway I would like to avoid this issue, so I can write lines as long as I want, but I've not found a configuration option to do this within "Preferences" dialog.
I am using Firefox 1.5.0.9 in RHEL 5.0. I have a application which needs to load some jar files to the firefox browser, for which I am adding the path in LD_LIBRARY_PATH in ~/.bashrc.The issue is when I launch the firefox through a shortcut, the LD_LIBRARY_PATH is unset, and it just sets it to Firefox specific libs.Additionaly if I run firefox through command line it sets it perfectly fine, and appends the Firefox libs to the already set LD_LIBRARY_PATH.
View 1 Replies View RelatedCode:
#loop until there are no more files
while [ ${#files[@]} -gt 0 ]; do
for num in `seq 1 ${#files[@]}`; do
wurd=`tail -4 ${files[$num-1]}`
[code].....
Everything works.. but when it has to unset.. it breaks.. it doesnt give an error though.. it just jams the program.
Failed login attempts are logged to syslog with the user id or login id set to UNKNOWN_USER or UNSET.Anybody know if this is configurable. I would rather it just pass the actual id that the user used. Doesn't matter if it exist or not, just want to know if someone is guessing at user names and what those user names are
View 1 Replies View RelatedI have an old fedora 4 server, used primarily for ftp access, that I need to migrate to a new machine that will run Centos 5.There are 50 user accounts defined locally on that server: how can I migrate them (user, pass, login options -ie no shell access-, data dir) to the new centos 5 server?
View 3 Replies View RelatedProblem: I need to map directories to a user's home directory when they log in.
For example, I need to map /school/homework/ to user "steve" in his home directory when he logs in. I'm guessing I could use a logon script, but I can't figure out what command I should be putting in the script. I've been searching for hours through man pages and googled it a ton and can't find anything on it.
I have centos 5.4 installed (2.6.18-128.2.1.el5 #1 SMP Tue Jul 14 06:36:37 EDT 2009 x86_64 x86_64 x86_64 GNU/Linux), and I am using WHM/Cpanel to manage my server. I am looking for a GUI utility, so I can graphically manage users/groups.
View 1 Replies View RelatedHow would i go about restricting users to there home dir in sftp and in ssh so that they can not go poking about other dir and files thats above there home dir ?Operating systemCentOS Linux 5.4 Kernel and CPULinux 2.6.18-194.8.1.el5.028stab070.5PAE on i686
Also it will have to be a low resource usage as i dont have much memory on it
I'm looking for some sort of a way keep track of all of my users that are logging in to my server (centos 5), what I mean is this: at our firm we outsource some of our work (programing), now all of the developing is done under our servers, what I'd like to find is a way of taking all of the users log on time and display by days/weeks/months - so I could see how much did everyone had put in. Another thing that I'm looking for is a way to monitor an ongoing session and record user activity, now I've seen ObserveIT, but it doesn't support Linux agents as of today.
View 7 Replies View Related