Security :: Create Fully Isolated User Account?
May 16, 2010
I need to create such an account that the user wouldn't be able to r/w any file which doesn't belong to it, even if access mode is set to o+rw. I guess normal chmod/chown won't help here... How can i do this?
View 2 Replies
ADVERTISEMENT
Mar 13, 2010
I want to jail Skype into its own process and not the one I login with. That way, if a hacker breaks in, it's limited to this process and only the limited functionality that that user account has. The thing is this -- thousands of Linux guys run Skype, but Skype is hardly ever updated or have security patches, and we run it all the time. It seems like an easy avenue for an exploit. As well, my iptables firew all blocks input connections that I have not established, but Skype is an established connection. How do I create a Bash script that launches Skype under a separate user account?
View 3 Replies
View Related
May 9, 2010
how can I create a new user account?
View 2 Replies
View Related
Mar 25, 2010
i m not able to create new user account to my new install of 11.2 don't know whether it occured due to update problem or some installation failure. when creation a new profile through yast it gives a warning sub-domain not started and quits however a new user get added through cli but with no profile of its own. that user cant log into gui enviroment and when he/she logs through cli it automatically tranfers it profile to "/"(i.e root) i m using kde4.3
View 9 Replies
View Related
Jul 19, 2011
Can we create a limited user account in ubuntu like XP where user can not be able to change its networking settings (like changing IPs / enable & disable netwrok interface).
View 9 Replies
View Related
Mar 15, 2011
Our requirement is to create multiple user account with UID:-
/tmp/users.txt
rohit
guna
samsir
like this 100 user names in /tmp/users.txt file
/tmp/uid.txt
2001
3789
1000134
like this 100 UID's in /tmp/UID.txt file
The script should take input from both the files and create user account. for example user account rohit should have an UID of 2001 and user samsir should have an UID of 1000134.
View 2 Replies
View Related
Apr 30, 2010
I never considered I would want to remote access my laptop, or that I would be able to figure out how (I know....). In any case, my (only) username and password are not all that complicated - just there for deterence more than anything else (I have a barely functioning battery and a FDE hard drive, so if you're going to unplug and transport this baby, it'll shut off; my hard drive PW is solid).
In any case, I wanted to create another account that I could use to log into with SSH to be able to access files. I've started by disabling SSH login to my current user account (DenyUsers myusername). I know I could add a new user to my system with its own home directory and all, but I want it as least 'present' or invasive as possible. So in sum, is there a way to create an SSH only user, and if so, how?
I thought I would check here to get some pointers, to be sure I don't mess up my system!
View 4 Replies
View Related
May 24, 2011
I try to create a user who has the 100% permissions and roles as the root with following command:
Code:
useradd -c "ANOTHER ROOT" -d /home/root2 -g root -m -s /bin/bash root2
But it seems the user just in the group of root but doesn't have all the rights as the root.
View 8 Replies
View Related
Apr 21, 2010
Recently I have renovated an old computer which once belonged to my dad (the old HDD crashed, and I just bought a new one to replace it). My parents want me to fix this computer for my 5-year-old sister to use. I decided to use Linux Mint as the OS because everything (flash, mp3, etc.) is already configured.
How do I create a user account in Linux Mint with limited access for my sister, so that it won't mess up the entire system?
All she does is surf the web, so I'm just worried that she might accidentally mess up a system setting that I eventually will have to fix it.
View 2 Replies
View Related
Nov 9, 2010
How do I create a user account without Internet access?
View 8 Replies
View Related
Sep 2, 2009
I need to create a user account for a software developer. I am logged in as an administrator and was planning on using the 'useradd' command to add the developer. Where should I place his folder in the directory hierarchy?He will need to access the gcc compiler to do his development.
View 2 Replies
View Related
Jul 30, 2011
I am using NIS and I want to replace this with 389 ds. I have installed 389 ds and configured it. I could create user account from 389-console. But it does not create user home directory. Do I have to create user account and user home directory in linux first?
View 1 Replies
View Related
Jun 21, 2010
I am using this config.
I'm looking to create a white-list of email addresses that are allowed to send mail to my son's email address. Basically, I'm trying to do this:
if from not in ('dad@home.net','mom@home.net','unclebill@work.org')
then deliver to 'dad@home.net'
Or deliver to /dev/null or something.
This would be only for his account/domain, not server-wide.
The configuration above uses MySQL for forwarding and authentication. I'm not sure if that is a plus or minus for what I'm trying to do.
View 7 Replies
View Related
Sep 13, 2011
I want to create account for user named John Doe.
I'm trying: useradd "John Doe" and it's not work.
How to create user account with space inside on CentOS CLI?
View 6 Replies
View Related
Aug 25, 2010
Can i login to my server using my root account and create a public+private key for one of my users and then manually paste it into his authorized_keys file and give him the private key?
The user im giving it to has a chrooted FTP account...
Is it still ok that i used the root account to create it? He is not going to have root access or nothing is he? This is not a security breach in any way is it?
The user doesn't have shell access to create their own so this is the only way i can think of doing it...
Also what access should the user have to their .ssh folder + the authorized_keys file...?
Are they allowed to read the key? What about write?
View 9 Replies
View Related
Jan 14, 2011
creating template (phpldapadmin 1.2.0.5). I create new template where im creating User Account (possixAccount) but i need to create Generic: Ldap Alias that will be created in other ou than account and i need both in one template.
View 1 Replies
View Related
Dec 27, 2010
i use ubuntu 10.04, is there a way to set two passwords for 1 user account
View 2 Replies
View Related
Mar 12, 2011
I started up my computer and suddenly, I saw that there was a new user account. I didn't create it and no one else uses my computer (let alone has access to user account creations). It was called dtc. It didn't seem to have any privileges and the only file in its home folder was called Examples. Should I worry that I might have some kind of malware? I deleted the user and the folder (and it came back after a while). It's main group is dtcgrp. The User ID is 1004.
View 2 Replies
View Related
Dec 6, 2010
Is there software or mechanism that can help the administrator determine if more than one person is using the same user account via a shared password?
View 8 Replies
View Related
Aug 18, 2010
I ran a test where I login a test user several times using the wrong password to see that he gets locked out after several attempts. Now that I got the test user locked out, how do I unlock the test user? I tried passwd -u <test user>, but it says passwd: Error (password not set?).
View 4 Replies
View Related
Oct 19, 2010
Is there a possibility in openldap to allow a user to only create/manage specific LDAP users?For example user "mailadmin" may only create/manage mail accounts in LDAP that are named like "m1342895"? Or a specific list of user accounts that are in a specific group?
View 1 Replies
View Related
Jan 27, 2011
We are looking to monitor and log selected application file systems for file create/modify/delete changes that will also include, user account that changed/deleted the file, file name and date and time of event. Everything I have looked at does not seem to provide all of the information that we need.Inotify seems to monitor modify/create/delete but does not seem to provide the user account. Auditd seems to monitor modify/create/append with user account, but not deletes.We need to provide this information to auditing for Sarbane Oxley compliance.
View 3 Replies
View Related
Sep 25, 2009
I am a new Linux user and have a question about the administrative authentication. When I am logged in as a user and I need to do something that requires root privileges the little password window comes up and I enter the root password. My question is how long are the root privileges granted for?I noticed that a few minutes after finishing checking out the firewall configuration tool and closing the window that I was still able to re-enter the fire wall tool and other administrative tools. How do I log out of the root privileges without logging out and then back into my account?
View 2 Replies
View Related
Jan 2, 2010
I've written an article on my site which lays out steps for installing Wine and running it under its own, separate user account, so that Windows applications cannot access personal files (particularly those in your home directory).[URL}..i'm hoping that there are people on this forum who know Ubuntu inside-out, as I'd like to know how effective the described method is at trapping Windows applications so that they cannot read or write personal files or directories.
The way I understand it, once the process is running under user account wine, it's stuck with the access privileges of user wine. But are there ways in which a rogue application could break out of this prison and gain access to whatever it wishes? I'm guessing that such behaviour would mean someone customising Windows software to recognise Linux, and that such a thing is very unlikely, but I'm still interested to hear what gurus of the Ubuntu internals think of this method.
View 2 Replies
View Related
Oct 5, 2010
I am using Red Hat LDAP (version 3) and I have passwordLockout set as "on" at global level. Is there a way to disable account lockout for a specific user?
View 1 Replies
View Related
Nov 12, 2010
I remember my password very well and have no need of password recovery. Everywhere I look it's how to recover and I don't want that. The kind where you boot into root recovery console to change the password.
View 4 Replies
View Related
Apr 15, 2009
I've been looking for this feature for months and couldn't find a solution for this. Does anyone know how to create users and limit the user to a specified directory?
View 6 Replies
View Related
Dec 19, 2010
I made a Desktop User account. When I went on that account, it allowed me to execute sudo as if I was an administrator. I don't know what might be causing this. I do have ufw set up and blocking incoming connections. Do you guys know what might be at the root of this?Also, when I used sudo from the user account (which I shouldn't have been able to do), I provided the password for my admin account.
View 9 Replies
View Related
Jul 6, 2011
Is there a way to set Linux to automatically log in to a specific user account and at the same time lock the screen? I want to save time and trigger various software that always should start up on boot, while leaving the computer unattended during startup (extra important and practical for remote control boots), by enforcing a 'screen lock' so that no-one can see what happens behind the login screen without entering the login credentials.
View 3 Replies
View Related
Jun 4, 2009
Currently working on the targeted policy, I need a help in doing the following things as quick as possible:
1- How to create a totally new SELinux user (not mapping new linux user to SELinux user) I want a new user with no roles or with a maximum of 1 role. I also need how to compile the new user so I can used it for mapping users. At the time, I've tried creating a new file inside /etc/selinux/targeted/contexts/users similar to the other users inside this directory, but it did not actually seem to appear when using the command semanage to list SELinux users : semanage user -l
2- How to create a totally new SELinux role (empty for now) ? and how to make the relation between this new role and domains or types.
3- How to create new domain, actually following some old instructions I created the .fc and .te files, but not the .if file, which is more complicated than the other 2 file.
View 10 Replies
View Related