Software :: How To Restrict USB Devices
Jun 29, 2009How can i restrict use of USB in redhat. & also is it possible to allow USB devices for only specific devices or only few known penDrives?
View 2 RepliesHow can i restrict use of USB in redhat. & also is it possible to allow USB devices for only specific devices or only few known penDrives?
View 2 RepliesWill you so kind to tell me how I can organize the whitelist of trusted USB devices and all of other USB shouldn't recognized? I suppose, that I should write some udev rules but my experience too small
View 9 Replies View RelatedI'm working on a server and noticed that the to RAID5 setup is showing 4 Raid devices but only 3 Total devices. It's on a fully updated CentOS 5 system that only has three SATA drives, as it can not hold anymore. I've done some researching but am unable to remove the fourth device, which is listed as removed. The full output of `mdadm -D /dev/md2` can be see below. I've never run into this situation before.Anyone have any pointers on how I can reduced the Raid Devices from 4 to 3? I have tried
mdadm /dev/md2 -r failed
mdadm /dev/md2 -r detached
but neither work and since there is no block device listed I'm not quite sure how to get things back in sync so it's only seeing the three drives.
/dev/md2:
Version : 0.90
Creation Time : Tue May 25 11:07:04 2010
Raid Level : raid5
[code]....
Suppose that some person is insomniac because of a bad habit of chatting on the IRC every night until 3AM. That completely ruins this person's life because he is unable to wake up on time to attend his exams, because he will be fully exhausted everyday and will feel depressive.
That person is conscious of this bad behaviour, and would accept any help including installing a software on his own computer granting me admin privileges to install it.
Do you know of such a software that ideally would: Would prevent use of the computer at certain time ranges, let's say 11PM — 6AM Would gracefully shutdown the computer at the beginning of that time range (not killing all the applications brutally), and shutdown it if the user attempts to switch it back on Would warn 10 minutes beforehand Could occasionally be disabled if I give a one-time password to that person?
That person uses Linux, and I am curious of knowing what is available for that purpose. It is kind of a parental control, but not for a child.
How to restrict the swapping kernel memory and user process memory? Memory locking like mlockall()? Disable swapping feature in linux kernel? My system runs 64-bit CentOS under 6GB RAM.
View 1 Replies View RelatedI m new with Fedora 14, and i have a basic business case :
I want to setup a user which should
- only connect to the server with SSH (ex.: no X11 connection).
- cannot change its shell
- cannot do any SU / SUDO command
This user is very similar to a SERVICE user, as I expect him only to run a single program (its shell).
Under Linux, I would like to be able to launch anything from command line in a "safe" environment, i.e. be assured that it can't read or write any file on my computer, and even better if it couldn't access the network.I thought about creating a user with reading rights only in the current folder (and nowhere else), and su to this user to launch the command, would this work ? And what about the network ?
View 2 Replies View RelatedI've installed Ubuntu Desktop Ed 9 and I want to add a user account that would be very restricted. I would only want them to access the internet and run several programs. I do not want them to have access to the destkop, anything under preferences, administration etc... Is this possible?
View 1 Replies View RelatedI'm trying to VPN in somewhere and it doesn't like any outbound connections. I'm doing this for RDP, so can I somehow restrict the VPN connection to only be using the RDP port?
View 1 Replies View RelatedI'm running Ubuntu Server 10.04 32-bit.I'm looking to find if there is anyway I can lock down ubuntu so that remote access, whether it be SSH, ftp, apache.etc can be only accessed from a certain IP range, or a certain set of IPs?Essentially, we'll say the Server IP is 192.168.1.32, and I want the IP addresses 192.168.1.33-50 to be able to access the server, but no other IPs.I am in a switched environment, router's are not allowed to be placed on the network, and I do not have access to a DNS or DHCP server.Is there a way to do this in on the server via a configuration of some sort?
View 3 Replies View RelatedI've looked around and haven't been able to really understand how to do this yet.How can I set up a SSH user to access a single folder (and it's subfolders) on my system.I want to give my brother access to a folder under /media/Data/FilesBut I don't want him to access any other part of my system.I've set up a user (using useradd and gave him a password but no home directory).I want to have him use SSH to log in to my machine, start in the /media/Data/Files directory, and not be able to get out of that directory - but add/change/delete/etc any of the files.
View 8 Replies View RelatedPrior to purchasing this Toshiba L675D I was able on my old HP to explore other distros, but there seems to be some incomparability existing with this model that restricts 10.10 but accepts 10.04, kernel thing I assume. But in all other attempts to install, Mint, open Suse etc it loads the kernel then the Live CD freezes on a black screen blinking cursor. Have tried nomodeset with no success. Obviously Toshiba is no help with Linux and win 7 forum even cautions against creating an extended partition. Oh out of the box this baby had 3 primaries, one a recovery and hidden. Just an FYI
View 1 Replies View RelatedI was just wondering how do i restrict someone from entering other files. Like other peoples files & the system files. My users are in /home/. I am running ubuntu 10.10.So how do i restrict access to other folders. Because i dont want other people looking inside others files or messing up my linux files.
View 3 Replies View RelatedI just wondering if scp working with restrict bash ? It seems like my scp just stuck there while login.
If i use ftp i get 530 login failed..
If there is a general NFS share in the LAN and for example this share has three files - a, b, c is there any way to restrict file access to the root user of e particular host(falcon) in the same LAN environment while the normal users from the same host(falcon) should be able to access the NFS share & files a, b,
View 3 Replies View RelatedI am running RHEL release 4 (Nahant Update 6). I currently have a fax server that has been encountering issues recently after hours. My boss would like our helpdesk to monitor the status of these modems throughout their shift. This has led to a request for a helpdesk account to be created on our linux box that only has access to a few commands. Is there a way to limit the new user to only have access to the following commands?
cd
less
cat
Additionally I would like to create a script for them to run that would chmod our modems when necessary since their permissions reset after a power cycle. BUT not give them access to the chmod command, just chmod through that script for those specific devices.
As example, I have directory in /root called as "shared". i already shared this directory using NFS. i want to limit this directory size into 20 GB(20*1024*1024).That means "shared" directory reserved 20 GB disk space from the HDD.how can i solve this problem
View 3 Replies View Related1-Can I do su - userA in php? Cam I have php run the whole script as userA.
2-Can I make php to run from a certain directory? like chroot kind of things.
I use Rh server , can advise if I want to restrict the root user can not directly login to the system ( eg. ssh -l root IP_address" , what can i do ?
View 5 Replies View RelatedNeed to restrict cvs login from specific IPs
in file /etc/security/access.conf
+ : builduser : 10.200.2.1
Do not work
when changed to ALL as below it works
+ : builduser : ALL
I would like to allow a user to login through SSH but with different permission coming from different ipaddress.
For example, a user "tester" login to SSH through 192.168.1.1 and another user login with the same login id "tester" but from different ip 192.168.1.2.
How do I restrict 192.168.1.2 to only allow for viewing the content in the home directory while giving 192.168.1.1 full access?
Here's the beginning of the issue: I'm running Fedora 12 with httpd and sshd. I want to create a user with a scponly shell for sftp access, but this user should ONLY be able to view /the/http/base/dir and its subdirectories. The user should not be able to see or get into directories above the httpd base. Someone mentioned creating a chroot jail for sshd and binding the httpd base to that dir, but this seems like more work than is necessary for the application I wish. Also mentioned was creating a user, say user1 with a selinux user setting of staff_r. I have read the articles and creating a user of staff_r isn't overly difficult, but how would I make it where staff_r would be restricted to where I want them to be? If I'm not mistaken, that would require changing the context of /the/httpd/base/dir?
View 4 Replies View RelatedI want to restrict user for SSH Logon, but able to use SFTP.
Also, i like to know how to restrict a user on SSH from everywhere except one host.
I have configured postfix on my server.
telnet mydomain.com 25
helo validdomain.com
mail from: validaddress@validdomain.com
rcpt to: validuser@mydomain.com
[code]....
When I run this test, as expected, the email is delivered to validuser. However, postfix also delivers it to user1 and user2 despite the fact that the sender does not belong to my domain. I have implemented client, helo and recipient restrictions as below. How do I prevent the malicious use of CC as described here?
Snap of main.cf
-------------------
smtpd_client_restrictions = permit_mynetworks,
reject_invalid_hostname,
reject_rbl_client zen.spamhaus.org,
reject_unknown_client,
[code].....
I have a question in Samba and would like to ask you for the solution. Is there anyway we can restrict the SMB share access to particular domain name? say allowing access for "example.com" domain users only.
View 2 Replies View RelatedIs there software that is available that restricts access to ssh and sftp in a similar fashion as Chroot?
View 1 Replies View RelatedHow would i go about restricting users to there home dir in sftp and in ssh so that they can not go poking about other dir and files thats above there home dir ?Operating systemCentOS Linux 5.4 Kernel and CPULinux 2.6.18-194.8.1.el5.028stab070.5PAE on i686
Also it will have to be a low resource usage as i dont have much memory on it
i have configured my pc to run ntpd service. but i don't understand this line in ntp.conf:
Code:
restrict 0.asia.pool.ntp.org mask 255.255.255.255 nomodify notrap noquery
I have a dual head setup on Fedora 15 with nvidia drivers: two separate X screens (no xinerama, no twin view). Screen 1 is at right of Screen 0. My Wacom tablet is recognized by the xorg server and the whole tablet area is mapped to the whole area of Screen 0 which is exactly what i want. However when the stylus goes beyond the right edge of the screen, the tablet area gets mapped to Screen 1 and there is no way to come back to Screen 0. What i would like is to restrict the tablet to Screen 0 all the time. I used to do this in Fedora 13 by adding a file named
Code:
/etc/X11/xorg.conf.d/50-wacom.conf
in which there was a line
Code:
Option "ScreenNo" "0"
It doesn't work anymore. The option seems to be ignored by xorg since it doesn't appear anymore in
Code:
/var/log/Xorg.0.log
How can i restrict the tablet area to Screen 0?
I need to restrict the login time for an Opensuse user. Let's say : a user can login after 9am and have to logout at 10am.
Is there a fast and easy way to do it? (I have to administrate a machine under Opensuse but unfortunately, I am not a computer scientist...)