we are in a place where we have to give an account (with sudo access...) to a user we don't completely trust (I am reminded of this comic). What we need to set up is some way of logging pretty much everything that this user does, especially what he does as root (via sudo or sudo -s). Now, I know that anything we do can easily be undone by another user with root access, but we feel that if he does disable logging we can use this as a really good excuse to revoke his access. So, does anyone know what logging stuff I'd have to set up to completely monitor one user (it is ok if we are monitoring everyone, but we'd prefer to watch one user if possible)?
i am looking for a detailed description of the login process for both root and normal user , also locally and remotely.i read some sentences that the files .bashrc and bash_profile are needed for this process. But that was very concise.
How do I give permission to a logged in user to stop/start a specific service without entering a root/sudo password? So they can do a simple "service SomeService stop|start" It is for a headless Ubuntu server.
my system I want user1 and only user1 to be able to mount and unmount a specific partition, this partition contains backups and is usually mounted read only, needs to be temporarily mounted read/write by user1 while doing the backup.user1 is an unprivileged user. I've read that the user option will let any user mount the file-system (and only that user can then subsequently unmount it) and that the users option allows any user to mount or unmount the file-system.I also found this in mount's man pageQuote:The owner option is similar to the user option, with the restriction that the user must be the owner of the special file. This may be useful e.g. for /dev/fd if a login script makes the console user owner of this device. The group option is similar, with the restriction that the user must be member of the group of the special file.So it looks like I'd need a login script for that user to make the user owner of the device file (/dev/voiceserv/backup in this case)
How do you guys to do just that? I know the option for global logging, with parameters --log on service run or log-bin and err-log for inside my.cnf. But what i am looking for is a way to log specifically a table activity, any activity, be it select or update queries.
I am running a remote login server where I have multiple users. I am using No Machine NX for the remote login software. I also used Ubuntu Tweak and did some editing in gconf-editor in order to lockdown the machine. In the end the user has some files on their desktop they can view and one panel with a logoff button. This system has been in place for about 2 years now and running pretty smoothly.
I am not sure if this is an NX problem or Gnome problem. I have just one user, all of a sudden, that has nothing on the desktop and no panel when they login. The system was set for each user to have their /home folder as their desktop folder. I am not sure where to start trouble shooting this. I have looked a quite at few of the gconf.xml fiels for the user, but do not see anything out of the ordinary (comparing to other user's gconf.xml files)
I have RHEL4 server. my root is able to login from CUI mode but not able to login from GUI mode. normal user is able to login from GUI mode and we go to root through su command but directly root is not able to login from GUI
I have an external USB drive that is NTFS. It mounts fine under my account and my wife's, but only if I fully shut-down the computer between switching. While switching users or logging out then in with a different account it will not mount the drive. I am not sure what to do... but we both access data from the same drive.
When logging in to my user account in Fedora 12 i686 i received an error message "Could not update ICEauthority file". The file in question is in /home/janne/.
I can get into the system but several programs do not respond.
I have created a linux machine and installed some softwares on it with root user privileges . I used to login with root user credentials for doing the various task.
Later i have realise that this is not the best practice to follow and there should be a new user with less privileges to be created for doing the day to day task.
I have read the steps to create the user but will that new user sufficient enough to do the task that i m doing it through root user? Will my software allow the new user to work on them? I would be glad if someone points me to a guidelines on what should be my next step?
I just tried ubuntu 9.10 in recovery mode i came to know that i can change root passwd without knowing the password then i can change password of every user by logging in as root
My install of 11.4 has been running perfectly for for several weeks now. But- (always a but) today it started acting up. I cannot log in to any user account including Root after logging out. After a cold boot I can log in again anywhere but after logging out I have to reboot again then I can get back in to any account once. After logging out any attempted log in causes the splash screen to blank for a few seconds and then it comes back with the previous successful user name log in but typing in the password blanks the screen a few seconds again. Clicking on a user account also blanks the screen a few seconds and then it again comes back with the previous log in users name.
My X server restarts as soon as I log in as a regular user. Root user has access. I can log in both root and normal user in terminal and over SSH. I tried rebuilding and installing the proprietary NVIDIA driver, as it builds it's own config file for X. I've had no previous problems with X on this system. The last major change to the system before the last log out was the installation of MCNP5. MCNP5 was installed under the regular user; no root privledges were needed.
I have installed the new phpMyadmin3.4.1 on a server running Ubuntu 9.10 with apache and mysql. It runs on php5.2.10The apache config seems fine as the virtual directory that I configured works fine. http://<ip-of-server>/phpmyadminlink works. The home page is displayed. But when I enter the user name and password, instead of logging into the console, it again redirects me to the index page of the site. There are no errors displayed. I have checked that cookies on browser are enabled.The server is hosted on amazon web services, if that makes any difference
I just put on my Linux PC now and after booting logging into the user a/c, it just gives a blank screen with the desktop wallpaper - no menu's or anything, so there's pretty much nothing I can do. I know I had removed the menu and replaced it with the dock (awn dock or something).
However, I can log in as root and root works fine (so I'm doing the update at the moment).
Coming back to my question, I used to know an Ubuntu command which I put in as sudo (terminal)and it used to work like a magic command which would literally restore and repair my linux installation - I even used it when I bought a new system and transferred my linux hard drive from my previous machine to the new one and this one command actually setup and prepared my linux installation to work smoothly in my new PC - just one command after connecting my h/drive in the new PC.
I have a windows install with linux installed within the windows system using WUBI. I attempted to change the user folder and after logging off I received a err message regarding /home/XXX/.ICEauthority. I am using ubuntu 10.04 LTS.
I am afraid to ask with so many things changing around in each new release.Where would one add a custom script to execute when logging and shutting down in into a user profile like /home/test or /root ?would this be rc.local?
I'm working on a kiosk-type system. What it needs to do is boot, auto login as a specific user, display only the Gnome desktop (no icons, etc), and auto start an application.
Is this possible (I'm sure it is)? If so, can this be scripted, i.e. without having to use graphical tools like Sabayon.
I am currently working on a project related to packet sniffing which has been implemented using the concept of raw sockets. I am using C language.I am able to decode the following details from the packets received from a local network,like:
source and Destination Mac Address source and Destination IP Address source and Destination port no
But I am having trouble in decoding the domain name when an user in the local network is logging onto internet.For eg. if a user in the local network is trying to log on to web using his browser say if he has logged on to url then from the packet I need to get the following details
source Mac Address from which user had logged on source IP Address from which user had logged on domain name
I just set up my own server and basically my folder is on say /media/disk1/ and my girlfriends is on /media/patato/ is there a way i can set it so that if i log in it goes to my folder and if she does it goes to hers.... I've currently got it set up as /media/ that it goes to but i cant get it to change it for each user (we can also browse each others drive and we dont want that, we want to be tied into /media/ourdirectory and all of its subdirectories) problem is that it is running on a computer that use to be functional (same install because I cant find my disk drive) so it cant use home folders....
Here is what I want to do: have procmail get my mail from all of the different mail servers, and then put them in my inbox folder (I'm able to do all of this), but also have my emails sorted by domain into subfolders.So for example, procmail downloads my email, puts it into the gmail folder which is a subfolder of my inbox folder.I know how to get all of my email into the inbox folder - but not into a specific subfolder.
I want to know, how to allow to a specific user to run an application (for example Virtual Machine Manager) without entering a password? I have tried to add this user into appropriate groups, but it didn't helped.
I have a very peculiar issue - I can't log in to KDE as one particular user (andrew, which is my regular account) though all other users including root, mythtv & other family members can log in without any problem. When I try to login as andrew the X server appears to crash as the screen goes blank and I have to press Ctrl+Alt+BkSp to get back to the KDM login screen. The proximate cause seems to have been updating KDE to 4.4.5 using yum - I did this logged in as andrew in a terminal session using su - root, and the black screen problem arose next time I tried to log in.
I can log in OK as andrew using a different desktop manager e.g. Sugar. I am using radeonhd graphics driver; if I change to "vesa" in xorg.conf I can log in OK. If I change the home directory for andrew to that of another test user and change the file ownerships, I can log in OK. Therefore the problem must lie in a config file(s) somewhere in the andrew home directory tree, which is specific to KDE and also radeonhd. I have checked in all the obvious (and unobvious) places but can't find anything. There are no relevant SELinux errors or entries in syslog or Xorg.0.log. The .xsession-errors file from a failed login attempt is here [URL] it isn't significantly different from a normal one, and as the entries are not time-stamped I am not sure which ones arise during the login and which when I restart the X server. I am running F13 (kernel 2.6.33.6-147.fc13.x86_64) without any other significant issues.
Because I keep a lot of data on a Netgear ReadyNAS which can be presented as a NFS server, I would like to have the default CentOS user have a uid and gid that match those for the user that owns the main NFS share. That way I can treat it as if it were a directory that I owned on the local machine. I'm probably going to install CentOS 5.3 over again to get a totally clean system. What is the neatest way to ensure that the default user has the desired uid and gid? Or is there a better way to work with the NAS? (Right now I'm running it with CIFS shares, but these are quirky and do not behave quite like a local file system, I'm hoping that NFS would be more consistent, but previously attempts to run NFS were hampered by different uid and gid values).
I'd like to limit login attempts for specific user. I've found information in manpages: [URL]but I'm not sure if this '@' is purposly there, so would be that correct?
