[Search for users] [Overall Top Noters] [List of all Conferences] [Download this site]

Conference turris::digital_unix

Title:DIGITAL UNIX(FORMERLY KNOWN AS DEC OSF/1)
Notice:Welcome to the Digital UNIX Conference
Moderator:SMURF::DENHAM
Created:Thu Mar 16 1995
Last Modified:Fri Jun 06 1997
Last Successful Update:Fri Jun 06 1997
Number of topics:10068
Total number of notes:35879

10012.0. ".cshrc restricted access ?" by LYOV00::BOIRIN () Mon Jun 02 1997 10:54

    Hello,
    
    I need to protect the .cshrc user file from user's access. What access
    mode must be set up on the file and on the user's directory ?
    
    Thank for any help . Jean-Pierre.
    
T.RTitleUserPersonal
Name
DateLines
10012.1Restricted shell wanted?AOSG::MASINICKBrian W. Masinick, DTN 381-0013Mon Jun 02 1997 17:389
    What user(s) are you attempting to prevent access to .cshrc?  FWIW, if
    a user cannot read their OWN .cshrc file, they cannot execute it,
    either.  I tried chmod 110 .cshrc, and indeed I could not read the
    file, but it turns out I could not EXECUTE (source) it, either.
    
    Sounds to me like you might want to consider the use of a restricted
    shell.  Is that what you're looking for?
    
    Brian    2-JUN-1997 16:44:12
10012.2Execute only LYOV00::BOIRINWed Jun 04 1997 04:476
    Yes I need to execute it only ( I  need to change it from root account
    only ) and I have tried chmod 110 also and I got your results.
    
    How can I setup a restricted shell for these features ?
    
    Thank you for your help. JP
10012.3try rkshSMURF::MASINICKBrian W. Masinick, DTN 381-0013Wed Jun 04 1997 17:4211
    I don't use csh, instead I use ksh or bash, so I'm not sure if there is
    a csh equivalent or not.  But I can give you an example of how my
    ftphost restricted shell, rksh entry looks in /etc/passwd:
    
    +masinick:::103::/users/ftpuser:/usr/bin/rksh
    
    This system allows me to login and do things, such as telnet and ftp
    files, and a few other limited commands, which can be setup as needed. 
    See the documentation on ksh/rksh for starters.
    
    -Brian   4-JUN-1997 16:48:09