i would like to prevent all users other than the user "parker" on my system from using the su or sudo commands. I have not attempted to modify the sudoers file so it just contains the standard root ALL = (ALL) ALL.
View 5 RepliesI have a box with about 30-40 users on it, and I need to prevent a certain group of users from using sudo at all. Is this even possible.
View 4 Replies View RelatedIf there is a simple way to prevent accidental shutdown when the following situation occurs:
Sometimes, I log in on my father's computer to run some administrations' tasks (updates...). For that, I use SSH since I'm frequently far from my parents and what I want is to prevent a shutdown run by my father. Of course, he should be able to turn off by himself if nobody else is connected.
Molly-Guard allows to prevent distant shutdown, my request is a kind of complementary software.
Does anyone know a project which could fit with this request? Do you have simple ideas to write a short code I know bash, perl, python...
Is it possible to have a user in Ubuntu/Debian that does not have access to synaptic, apt-get, dpkg and cannot even download anything from the Web, but has root privileges otherwise?
Original post (above translated by aimar) code...
Alright, first Squeeze wouldn't create an initial RAM disk even with "--initrd" specified. Now I don't need one and it's creating one for me even though I don't want one! How do I stop this? I'm beginning to feel like I am using Windows in the sense that it's doing things on its own. Don't make me a RAM disk unless I say so!
View 10 Replies View RelatedI have a PC that have a new Ethernet card that is not yet supported by Debian/Lenny.I downloaded the latests driver from the manufacturer and after a make;make install everything works like a charm.My problem is that one day after a probable update, Debian overrided my new driver by an other one causing my Ethernet card to shut down.After an other make install, everything work again like it should..But how do i do to prevent Debian to update my driver ?
View 1 Replies View RelatedHowto create usb-hdd using live-helper to prevent xfce desktop from any changes? Normal user shouldn't change any icon on the desktop.
View 8 Replies View RelatedWe have the following server at collocation: [URL]
Provider's technicians were working for 3 hrs but finally were unable to set up hardware RAID1 on it.
What could prevent them from doing it? Is it difficult to set up RAID1? It is mentionned as basic function in specifications.
They said debian not booting after raid configured...
I'm trying to prevent GDM/Gnome from turning the screen off prior to login. It's current behavior, under 3.14, slowly fades the screen out and then enters DPMS mode after 10 minutes.I have zeroed out the following dconf settings, under both root and user, but the default behavior persists.
org.gnome.desktop.session idle-delay
org.gnome.settings-daemon.plugins.power sleep-inactive-ac-timeout
org.gnome.settings-daemon.plugins.power sleep-inactive-battery-timeout
I have a ppp0 entry with post-up options like this
mapping ppp0
map none photon-plus motorola
map timeout: 12
## map init-time: 12 # for slow drivers
[code]...
If I comment those off then no such problem, hence some how ppp0 executed automatically and there is no [auto ppp0] any where. How can I stop this forcefully ?
How can i see history of all sudo users and all root users in fedora 13 ? history command only shows one users history ?
View 5 Replies View RelatedWe are trying to set up a classroom training environment where our SIG can hold classes for prospective converts from Microsoft/Mac. The ten machines will have /home/student01..10 and /home/linsig01..10 as users. We want /home/student01 to be able to explore and sudo so they can learn to administer their personal machines at home. We don't want them to be able to modify (sudo) /home/linsig01. I've seen the tutorial on Access Control Lists but I'd like other input so we get it right the first time.
View 3 Replies View RelatedSeems like this is a running issue. also, sudo returns "The value user is not in the sudoers file. This incident will be reported" kdeusu just makes a noise and returns nothing.. In the past i had a workaround of using nautilus, but, nautilus seems to be missing from jessie repo (same for gnome files).
[URL] ... ssoo... this happened and it seems to be going somewhere, but, i can't really make sense of it, and there was no solution..
Also found this [URL] .... and the pathnames should be fine but i don't want to go around arbitrarly entering commands
There was also [URL] .... which only mentions using kdesu which... doesn't really 'exist' anymore.
I have two machines running Debian Squeeze (a laptop and a desktop). On my laptop sudo works fine, however on my desktop sudo doesn't remember my password for 1 second!!! I have created a script for the upgrade procedure with apt (to make things easier). The script is nothing more than a few commands separated by operators. It is completely useless if I have to enter my password six times while my script is running.
I tried to add timestamp_timeout=15 to the sudoers but it didn't help.
Does anyone have any idea why this could be?
is there a way to allow a program mounting a drive without requiring it to ask for sudo password (apart from running it with sudo)? To be more specific, I'm annoyed by the sudo password request by TrueCrypt whenever it needs to mount a volume.
I've thought about creating another user, allowing it to mount volumes and then running TrueCrypt as this user at boot. I don't know whether GNU/Linux allows for such policies... maybe I should look into SELinux?
EDIT: For the issue at hand (encrypted USB stick both on Windows and Linux), I'm investigating FreeOTFE. I'm still curious about the privileges issue, anyway.
I keep getting this error on my debian server (Buffalo Linkstation so there is no GUI):
Debian Linux Version 2.6.12.6-arm1
W: Failed to fetch http://ftp.us.debian.org/debian/dists/squeeze/Release Unable to find expected entry main/binary-arm/Packages in Meta-index file (malformed Release file?)
W: Failed to fetch http://security.debian.org/dists/squeeze/updates/Release Unable to find expected entry main/binary-arm/Packages in Meta-index file (malformed Release file?)
E: Some index files failed to download, they have been ignored, or old ones used instead.Ive tried and tried changing the source.list to different repos but keep getting the same error over and over. Im really not sure what to do and I have no idea how to fix it. Its been working fine for the longest time.
source.list
#### Debian Main Repos
#deb http://http.us.debian.org/debian/ stable main contrib non-free
#deb-src http://http.us.debian.org/debian stable main contrib non-free
#deb http://security.debian.org stable/updates main contrib non-free
#deb-src http://security.debian.org stable/updates main contrib non-free
[Code]...
I have Debian 8 installed, using:
* gdm3 as the default display manager (set up in "/etc/X11/default-display-manager");
* LXDE as the default desktop environment.
I did "dpkg-reconfigure locales" and I selected three languages: "en_US.UTF-8", "it_IT.UTF-8", "sv_SE.UTF-8" (the predefined one is "it_IT.UTF-8").Now I wish to create two more users each with a different language (both for X and console applications).I did a lot of googling without success; I tried modifying ~/.profile or ~/.dmrc (adding "export LANG=...") but they didn't work. I was able to change only the system-wide language, not the one of a single user.I got the conclusion that It's not possible to have multiple users each with a different language. Is it true?
I made another try.In another installation (Debian 8, with GNOME and LXDE) I created two users:antonio, ida.The former has only one hidden file in its home-dir: ".bashrc" with "LANG=it_IT.UTF-8" as the last line (no "export $LANG" added).The latter ("ida") has only two hidden files in its home-dir:
1. ".bashrc" clean, with no "LANG=it_IT.UTF-8" line
2. ".dmrc" containing two lines:
Language=sv_SE.utf8.I put "/usr/sbin/gdm3" in "/etc/X11/default-display-manager".After reboot both users are OK: each of them displays its own language: antonio has all menus and programs in italian ida has all menus and programs in swedish.
I was able to create 4 users with 4 languages (SE, IT, FR, ES). Then I deleted all directory and files (including "~/.bashrc" and "~/.dmrc") of one user, rebooted the PC, and NOTHING changed! So, where is stored the user's language?Not in his home; there is a list elsewere?
0. Use "lightdm" (not "gdm3") as the display manager (see "/etc/X11/default-display-manager")
To install it: su -c "apt-get install lightdm"
1. su -c "dpkg-reconfigure locales"
(select the desired locales: en_US.UTF-8, it_IT.UTF-8, sv_SE.UTF-8, etc; set "default locale for the system environment=None")
2. su -c "adduser emil" ("emil" is the name of a swedish user)
3. Logout
4. Select "Swedish" as default language (see at the top-right corner of the screen)
5. Write user name (emil) and password to login
6. After login, language is english (but file "~/.dmrc" is created with the correct language).
7. Reboot PC.
8. After reboot, login again as "emil": now language is Swedish
Now you can change the display manager to gdm3 if you prefer.To change applications language: su -c "apt-get install task-swedish task-swedish-desktop"
I found the file containing the user's language: it's the same containing the link to its icon:/var/lib/AccountsService/users/UserName.(needs "apt-get install accountsservice"). Editing that file is much simpler as I described earlier
I'm newbie on Debian, and I just installed Debian 8.2. (I used to run openSuse, and I see Debian is quite different.)
Where should I set environment variables (like PATH or JAVA_HOME) in order to affect all users?
I read some documentation about that, but It is not clear for me, the difference among "/etc/environment", "/etc/bash.bashrc" and "/etc/profile".
(In openSuse, I used to create a file "/etc/bash.bashrc.local" and set the environment variables there, in order these settings are not lost with updates.)
I have vsftpd installed on my Debian (squeeze). I wish to let a local user (ftp) access the FTP server, but not login as normal user through SSH. In vsftpd.conf, I have enabed local user and chroot. I have also changed the shell of the local user (ftp) to /bin/false. The problem is that, I cannot login the FTP server from another computer (I login as "ftp" on a Windows machine). But when I change the shell of the local user (ftp) to /bin/sh, I can login the FTP successfully.
Is this the problem of Windows, or I should use something else instead of /bin/false if I want to prevent "ftp" login service other than FTP?
It looks like my web/ftp server has been hacked but I'm not sure how. I logged in tonight and found I had new mail. I read it and found some e-mails that had failed to send because I don't have mail setup (luckily). The e-mails were trying to send my user name and password to the e-mail address lostsoul2k@ymail.comI've no idea where to start, I use SSH, FTP now and then and it hosts a Wordpress site. The FTP users do not have access via SSH, only my user ID. However, the e-mails also contained another user ID that only has FTP access to the server.I've looked through the logs for rkhunter but it doesn't look like it found anything.
View 11 Replies View RelatedI have a USB stick, formatted as FAT32 and I assumed that everybody would be able to read from and write to it. However, I find that if more than one person is logged on to the machine (logged on locally, with "Switch User"), then only one of the users is allowed to write to the stick, and the other users are only allowed to read from it. Is that normal?
Here's the scenario: person A logs into the machine, is in the middle of something but gets called away and the screensaver kicks in. The screen is now locked. Person B comes to the machine to quickly copy a file onto a USB stick, doesn't know person A's password so does a "Switch User" and logs in as themselves. They plug in the stick, can read from it, but can't write to the stick at all. Permission denied.
By doing a "ls -l /media", person B can see that the stick is mounted but is owned by personA with permissions drwxr-xr-x . So only person A can write to the stick. I haven't done extensive testing but it seems to be the person who logged on first who gets to own the stick. It's certainly repeatable as described above. And it's really annoying, because unless person B knows the root password, he can't write to the stick. As a real last resort person B could reboot the computer but he doesn't know whether person A has any important stuff open or not.
I would like to configure visudo to authorize user to start only one application with sudo on one peculiar host and forbid everything else so, after reading the man, I came up with :
Code:
Select alluser    ALL = (ALL:ALL) !ALL
user    host_name = /usr/bin/application
But it does not seem to work.
I have an old server running CentOS 5. The encription method used was the default MD5 for the shadow file. I would like to migrate the server to Debian Squeeze which uses SHA512. I have already copied the passwd, group and shadow file with the user accounts information but the Debian machine doesn't let the users login. I have already looked in the pam files to make it accept the MD5 encryption without any luck. how can i migrate the users without resetting their passwords?
View 1 Replies View Relatedi've written a bash script to add new users to our system. the script works so I won't bother you all about that. when a new user is created with it, they can immediately login to our domain from any terminal, which is good. However, the newly created user is unable to login to debian at all, and so cannot access the server. when attempting to do so, they get a message like "the system administrator has disabled your account". This is a good thing really as normal users have no need for debian login, but I do need to add a few admin users who will need direct access to the server machine.
/usr/sbin/useradd -g smbusers -d /home/$username -s /bin/false -m $username
passwd $username
smbpasswd -a $username
This is the code I'm using to add the user. The rest of my script is just a wrapper and GUI. I figure the login shell may have something to do with it, so I tried changing the shell of a user to the default /bin/bash. This resulted in the user being able to login - sort of. Gnome doesn't load though, and there's a cascade of errors across the screen about things failing to save or load settings. mostly stuff like nautilus, X, and gnome. the desktop background is black and there's no interface. Logging in with a previously existing account works fine though. Clearly I have an issue somewhere.
I did a 'netinst' today and de-selected every available option when I got to the 'software selection' screen (even 'Standard System & 'Desktop Environment') however after a fresh install, I noticed what seemed to me like useless / unnecessary system user accounts:
- news
- games
- www-data (obviously no Apache is installed)
I was wondering if there was a way to avoid this from a minimal install?
I have 2 users on my HPmini 210 netbook running Squeeze. I just found out that it does not connect to existing wireless networks when I login as the second user. Is it supposed to happen by default or am I supposed to do something to make that happen? Another problem is that when I tried to create "new connections" again for the second user, the keys won't work. The same keys are working for the first user. The network keys are WEP 64 bit HEX.
View 2 Replies View Relatedjeff@optiplex:/media$ ls -l
total 124
lrwxrwxrwx 1 root root 6 Apr 7 14:46 cdrom -> cdrom0
drwxrwxr-x 2 root root 4096 Apr 7 14:46 cdrom0
[code]....
I need to set up quotas so each user has a limit of 20GB (soft could be 15GB) on their homes.Is there a way to set up a default quota for all the users, or do i have to do this for the 345982374058 users in my system manually?would group quotas help? (i dont understand much of these type of quota)
View 2 Replies View RelatedI need to add another user besides the one set up during the installation procedure but I also need to limit all users to use only their own /home/user directory.
View 4 Replies View RelatedI did search the forum but didn't find an answer.
I have setup Postfix + Dovecot on my basic debian 5 server. If I send a message to a localuser@mydomain.com from mutt, it delivers just fine and is visible when viewed through squirrelmail, I can also send just fine.
My issue is that irrespective of what options I set in main.cf, I cannot for the life of me get Postfix to stop erroring with "Recipient address rejected: User unknown in virtual alias table". I'm stumped.
My main.cf is as follows code...
I do not want to setup virtual hosting with MySQL or similar, I literally want to receive mail in local users mailboxes for a single domain. Any ideas on what's missing?