Ubuntu :: Create A Limited User Account?
Jul 19, 2011Can we create a limited user account in ubuntu like XP where user can not be able to change its networking settings (like changing IPs / enable & disable netwrok interface).
View 9 RepliesCan we create a limited user account in ubuntu like XP where user can not be able to change its networking settings (like changing IPs / enable & disable netwrok interface).
View 9 RepliesI want to create a limited user, such that the user should only have the access to usb drives, cd drives and internet. And also I want to restrict the user from deleting the files from the system. How to do it..?
View 5 Replies View Relatedhow can I create a new user account?
View 2 Replies View RelatedHow do I create a user account without Internet access?
View 8 Replies View Relatedi m not able to create new user account to my new install of 11.2 don't know whether it occured due to update problem or some installation failure. when creation a new profile through yast it gives a warning sub-domain not started and quits however a new user get added through cli but with no profile of its own. that user cant log into gui enviroment and when he/she logs through cli it automatically tranfers it profile to "/"(i.e root) i m using kde4.3
View 9 Replies View RelatedOur requirement is to create multiple user account with UID:-
/tmp/users.txt
rohit
guna
samsir
like this 100 user names in /tmp/users.txt file
/tmp/uid.txt
2001
3789
1000134
like this 100 UID's in /tmp/UID.txt file
The script should take input from both the files and create user account. for example user account rohit should have an UID of 2001 and user samsir should have an UID of 1000134.
I never considered I would want to remote access my laptop, or that I would be able to figure out how (I know....). In any case, my (only) username and password are not all that complicated - just there for deterence more than anything else (I have a barely functioning battery and a FDE hard drive, so if you're going to unplug and transport this baby, it'll shut off; my hard drive PW is solid).
In any case, I wanted to create another account that I could use to log into with SSH to be able to access files. I've started by disabling SSH login to my current user account (DenyUsers myusername). I know I could add a new user to my system with its own home directory and all, but I want it as least 'present' or invasive as possible. So in sum, is there a way to create an SSH only user, and if so, how?
I thought I would check here to get some pointers, to be sure I don't mess up my system!
I try to create a user who has the 100% permissions and roles as the root with following command:
Code:
useradd -c "ANOTHER ROOT" -d /home/root2 -g root -m -s /bin/bash root2
But it seems the user just in the group of root but doesn't have all the rights as the root.
Recently I have renovated an old computer which once belonged to my dad (the old HDD crashed, and I just bought a new one to replace it). My parents want me to fix this computer for my 5-year-old sister to use. I decided to use Linux Mint as the OS because everything (flash, mp3, etc.) is already configured.
How do I create a user account in Linux Mint with limited access for my sister, so that it won't mess up the entire system?
All she does is surf the web, so I'm just worried that she might accidentally mess up a system setting that I eventually will have to fix it.
I need to create a user account for a software developer. I am logged in as an administrator and was planning on using the 'useradd' command to add the developer. Where should I place his folder in the directory hierarchy?He will need to access the gcc compiler to do his development.
View 2 Replies View RelatedI need to create such an account that the user wouldn't be able to r/w any file which doesn't belong to it, even if access mode is set to o+rw. I guess normal chmod/chown won't help here... How can i do this?
View 2 Replies View RelatedI am using NIS and I want to replace this with 389 ds. I have installed 389 ds and configured it. I could create user account from 389-console. But it does not create user home directory. Do I have to create user account and user home directory in linux first?
View 1 Replies View RelatedI am using this config.
I'm looking to create a white-list of email addresses that are allowed to send mail to my son's email address. Basically, I'm trying to do this:
if from not in ('dad@home.net','mom@home.net','unclebill@work.org')
then deliver to 'dad@home.net'
Or deliver to /dev/null or something.
This would be only for his account/domain, not server-wide.
The configuration above uses MySQL for forwarding and authentication. I'm not sure if that is a plus or minus for what I'm trying to do.
I want to create account for user named John Doe.
I'm trying: useradd "John Doe" and it's not work.
How to create user account with space inside on CentOS CLI?
creating template (phpldapadmin 1.2.0.5). I create new template where im creating User Account (possixAccount) but i need to create Generic: Ldap Alias that will be created in other ou than account and i need both in one template.
View 1 Replies View RelatedWe are looking to monitor and log selected application file systems for file create/modify/delete changes that will also include, user account that changed/deleted the file, file name and date and time of event. Everything I have looked at does not seem to provide all of the information that we need.Inotify seems to monitor modify/create/delete but does not seem to provide the user account. Auditd seems to monitor modify/create/append with user account, but not deletes.We need to provide this information to auditing for Sarbane Oxley compliance.
View 3 Replies View RelatedI want to jail Skype into its own process and not the one I login with. That way, if a hacker breaks in, it's limited to this process and only the limited functionality that that user account has. The thing is this -- thousands of Linux guys run Skype, but Skype is hardly ever updated or have security patches, and we run it all the time. It seems like an easy avenue for an exploit. As well, my iptables firew all blocks input connections that I have not established, but Skype is an established connection. How do I create a Bash script that launches Skype under a separate user account?
View 3 Replies View RelatedMost of us know the basic security practices on Windows:
Use a limited account
Set a password
Disable unused services
Uninstall bloatware
Antivirus / Antimalware
etc.
I haven't ran linux as my main desktop computer before, so I don't know how to properly secure it. I have heard linux is supposed to be more secure than Windows, but I know that the default settings of anything are rarely secure. What are some things I should do as a new Linux user to secure my desktop system from attack?
I have SSH running on a computer I use as a server at home and login to it for my own purposes but am needing to share access to this server with someone else, and I'd like to do it in a way so that when they sign in all they see is the contents of one folder and nothing outside of it. So I'd like them to have full access to this folder and do anything they want with it, but not be able to browse outside of it at all via something like WinSCP (they're using Windows). I'm thinking I need to create a new account for them to sign in with but beyond that I'm not sure what I need to do. The only other special thing is that the folder I'd like them to be presented with is actually on an external hard drive. We're going to be doing a lot of online music collaboration and I need to give him lots of free space to drop files and the internal hard drive doesn't have a lot to spare right now.
View 6 Replies View RelatedI have a problem with the Google search box top right corner in Konqueror, when entering search I recieve an error page "Unsupported Protocol" Google asks for ioslave or kioslave. Also when highlighting text on a page and right clicking with the mouse no search option is given. I created a new user and all works as it should for the new user. What is wrong with my user account? I have reset default values in Konqueror setup.
View 3 Replies View RelatedHow do I create a user with ftp access and/or Putty access that can only see and change certain directories. I want to create users to work on my website but I don't want them to have access to all of the folders.
View 2 Replies View Relatedis there any way to make user with command text, just with accessbility to change network IP Address ?
View 4 Replies View RelatedI'd like to add essentially an anonymous user, which does not require a password. Second I think it's probably a good idea to only give this user very limited permissions, is there a way I can restrict the commands that they can run to a list (i.e. they should be able to run scp, ls, cd, maybe a few more, but not much)?
View 5 Replies View RelatedI want to have an account (beta user), on which:I can use the Internet and other programs without administrative rights without the right to install programs with a kind of sandbox for everything that is connected to the Internet, which means: everything that is associated with the web browser's processes and files that I save to hard disk I want to be separated from the rest of the system, so that whatever can catch up on this account will be locked in it, for example any (if at all) possible malicious scripts from Internet or whatever may be dangerous now or invented in the future. Sometimes, for example, I save the web page to disk with all it content.
And in case someone cracked into this account I want make it in that way that he could not do any tricks to read or change passwords, or make any other changes to the system. The best would be if a password for that user might serve only to log in without having any other powers, and I would give that user an automatic login. For now I created a beta user without administrative rights. I understand that the limiting rights of the user are associated with limiting rights to their home directory. There are also groups, and a user may be included or excluded. I excluded that user from admin group but I don't know what else I can limit and how. When I give chmod 0644 for /home of this user he cannot run Firefox. When I give him 0740 he can run applications, so I assume the x attribute must be preserved.
This is a user without sudo rights, so when I type sudo apt-get update a message shows up correctly that this user doesn't belong to the sudoers group. But still it's not what I wanted. When the user runs Gufw and wants to change the settings to disable the firewall, a message shows up asking to type in a password of alpha user = primary user, which is that belonging to the sudoers group, the first / main user that I created during system installation. I wish that there was only the message that the beta user has no power to change anything, which means even completely remove the possibility of asking for sudo.
In addition, I wish that this beta couldn't be able to change the permissions to its home directory, or go to see what is above. Because so far beta can change the file permissions for its /home, even without a sudo password. How can I do it? Do I need to create a kind of chroot jail for this user? I would like any changes to that user account could be made only after the user log off from beta account, and log in on alfa account and that beta could run only programs that ware installed by alpha. And that beta could read and write, but alfa could also read and write or remove, alter files on beta account. Basically, alfa account should be superior to beta account. Can do that?
it is possible if i can have sub-users in my server and can i allocate a limited amount of space only. For example i am the root of server and now i can add another user with name john and he should be able to use only of 2GB out of my total hard-disk.
View 4 Replies View RelatedDo you think there is a way of accessing different user data from another account which I have set up.
Ie. user 1 = account has messed up
user 2 = account works fine
access user account 1 home directory from user 2 work space?
I want to share files over the web with only a few people and limiting them to certain folders. I have been doing a remote access (ssh) to my server to access it from a pc on the local network. I later found out the same program doing ssh (open_ssh) was also doing sftp, great I could do both with one system account. Problem I couldn't find away to configure another user to go over the web with limited folder access without messing up my user to access the pc. I tried ftps by using vsftpd, I couldn't get chroot set up correctly or even log in. So my question is what program and/or protocol should I use to do secure ftp over the web?
OS: Ubuntu 64bit 10.04
I have a user account which is required to run as part of the operating system and as a service. I am currently attempting to install my companies software on an Ubuntu desktop via wine just for the purpose of finding out if it's do-able.
Is there a way, in Ubuntu, for a user account to be given the local rights assignment to act as part of the operating system and to function as a service in the background?
Apache is run as www as is all the files/folders. People are uploading via FTP, scp, so the problem is if I chmod so everyone can read, then rsync as a user it works until new files are added which then my ; if rsync fails with a permission denied. Now I can add a chmod in the script so everyone can read, but since www can already read, I figured I would just change my script to use www. I added the ssh key to his authorized_keys file, but when I try to just ssh in I see this in the secure file;
server sshd[29539]: User www not allowed because account is locked
sshd[29539]: Failed none for invalid user www from ip port 54983 ssh2
Now I read a few places already saying I need to add a password to the account, etc. but before I jump and try all I read, 1st major one, will this now break apache? Will this affect any startup things, etc. and .... will that unlock that user for ssh in or is there another preferred method?
I recently installed likewise 6.0 on a Ubuntu 10.04 box and I was able to login as a Domain user. However my domain user account is not showing on the "User Settings" panel (I can only see locally created accounts). And if try to change login shell by typing "chsh", then it tells me user "DOMAINusername" does not exist in /etc/passwd.
Does anyone know a way around this?