主題: How to control user activities

[kinux]

Hi, all

how to control users

I want to control the users activities, so i don't want them use some commands, such as they can't use finger, make, etc..

how i can do it???

thx

[duncanlo]

FreeBSD的安全機制不知如何?!

要不要考慮不讓User可以telnet進來,
或是用chroot,只限制能用那些command,
我看很多學校計中的mail主機都是這樣設的!

[kinux]

hi,

我只是想讓user可以經ssh和ftp進來和讓他們用某一些的指令，如
in ssh:

mkdir, ls , cp , rm , cat , touch , .....etc.
 
no make , can't compile no finger....
in ftp:

put , get ,

Those work only in their home directory!!!

How to do so??

[beethobear]

hi,

我只是想讓user可以經ssh和ftp進來和讓他們用某一些的指令，如
in ssh:

mkdir, ls , cp , rm , cat , touch , .....etc.
 
no make , can't compile no finger....
in ftp:

put , get ,

Those work only in their home directory!!!

How to do so??

you can add alias in .bash_profile  at their home directory
for example:
alias make='echo "Attention!!you have no access to this command" '

[kinux]

===============================================
you can add alias in .bash_profile at their home directory
for example:
alias make='echo "Attention!!you have no access to this command" '
===============================================

這樣會不會太麻煩了, 每一個user都這樣做, 另外, 太多的command 不允許他們用了.

有没有更簡單的方法? :roll:

[duncanlo]

若是用chroot的方式,也許可以弄成帳號範本!

不過假如是已經開好帳號了,
那只要一個一個設了!

[kinux]

===============================================
若是用chroot的方式,也許可以弄成帳號範本!
===============================================
請問這是不是要寫一個腳本來控制帳號???

但我不會寫shell , 也不會寫perl. 有什麼辨法??

[duncanlo]

===============================================
若是用chroot的方式,也許可以弄成帳號範本!
===============================================
請問這是不是要寫一個腳本來控制帳號???

但我不會寫shell , 也不會寫perl. 有什麼辨法??

好像作成範本就行了...

寫程式....我也不會吔!

[kinux]

那麼怎樣作範本...
可否講一講.... (我還沒作過) :x