SUMMARY FW: restricted shell

From: Kanellopoulos, Angelos <akanellopoulos_at_upccorp.com>
Date: Thu Dec 23 2004 - 05:30:06 EST
Thanks to Peter Ondruska and Matinyarare David for their fast replies. I
finally used Peters way. David proposed to just replace the shell with the
sar binary. It worked but i didn't know how to pass the sar arguements. 
thank you again


-----Original Message-----
From: Peter Ondruska [mailto:peter@ondruska.com]
Sent: Thursday, December 23, 2004 11:25 AM
To: Kanellopoulos, Angelos
Subject: Re: restricted shell


to make sure user does not interrupt .profile, disable ability to 
interrupt by adding to .profile beginning:
trap ""  2 3


Kanellopoulos, Angelos wrote:

>user is not locked after executing sar. keeps a normal shell
>
>-----Original Message-----
>From: Peter Ondruska [mailto:peter@ondruska.com]
>Sent: Thursday, December 23, 2004 11:03 AM
>To: Kanellopoulos, Angelos
>Subject: Re: restricted shell
>
>
>Not sure if this works but the idea woudl be to set user's shell to rksh 
>and .profile with only one line: /usr/bin/sar -A. after login and 
>execuring .profile user is locked to what rksh allows.
>
>Kanellopoulos, Angelos wrote:
>
>  
>
>>Hello Sun managers,
>>Do you know how I can set up a user account to have shell access, but be
>>able to run only sar and that's it ? and better if the sar starts
>>automatically by the login, and log out when you exit sar? 
>>thank you.
>>
>>Angelos Kanellopoulos
>>Unix system administrator
>>United Pan-Europe Communications
>>Boeing Avenue 53
>>119PE Schiphol-Rijk
>>
>>
>>
>>********* DISCLAIMER ********* 
>>
>>This message and any attachment are confidential and may be privileged or
>>otherwise protected from disclosure and may include proprietary
>>information.If you are not the intended recipient, please telephone or
>>    
>>
>email
>  
>
>>the sender and delete this message and any attachment from your system. If
>>you are not the intended recipient you must not copy this message or
>>attachment or disclose the contents to any other person
>>_______________________________________________
>>sunmanagers mailing list
>>sunmanagers@sunmanagers.org
>>http://www.sunmanagers.org/mailman/listinfo/sunmanagers
>>
>>
>> 
>>
>>    
>>
>
>
>********* DISCLAIMER ********* 
>
>This message and any attachment are confidential and may be privileged or
>otherwise protected from disclosure and may include proprietary
>information.If you are not the intended recipient, please telephone or
email
>the sender and delete this message and any attachment from your system. If
>you are not the intended recipient you must not copy this message or
>attachment or disclose the contents to any other person
>
>
>
>
>  
>


********* DISCLAIMER ********* 

This message and any attachment are confidential and may be privileged or
otherwise protected from disclosure and may include proprietary
information.If you are not the intended recipient, please telephone or email
the sender and delete this message and any attachment from your system. If
you are not the intended recipient you must not copy this message or
attachment or disclose the contents to any other person
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers
Received on Thu Dec 23 11:11:48 2004

This archive was generated by hypermail 2.1.8 : Thu Mar 03 2016 - 06:43:41 EST