How to disable a specific command(s) for a certain user.

Riyesh — Mon, 22 Dec 2008 05:42:30 +0000

Please follow the below steps to disable a specific command(s) for a certain user.

# su – riyesh
$ which rm (Here rm command as an example)
$ mkdir ~/bin
$ ln -s /bin/* ~/bin/ (/bin is the PATH for rm)
$ rm -rf ~/bin/rm

Take the output of $PATH for this user

$ echo $PATH > MyPATH.txt

Edit this file and replace /bin with ~/bin

$ su -
# cat /home/riyesh/MyPATH.txt >> /home/rieysh/.bashrc

Change the permission of /home/riyesh/.bashrc
# chmod 444 /home/riyesh/.bashrc
# chattr +i /home/riyesh/.bashrc

That’s all.
But the user can reset the PATH variable anytime to overcome this.
Please comment with alternatives for this.

Limit number of Shell logins by a USER or GROUP

Riyesh — Mon, 22 Dec 2008 05:31:08 +0000

ltiple Shell login by the same user on a Linux box you have to set a maximum number of logins in /etc/security/limits.conf for a user or a group.

For example:

# groupadd salesgroup
# useradd -G salesgroup salesman1
# useradd -G salesgroup salesmanager
# echo “@salesgroup – maxlogins 10? >> /etc/security/limits.conf
# echo “salesman1 – maxlogins 5? >> /etc/security/limits.conf

Here the group salesgroup can make a maximum of 10 logins at a time.
And the user salesman1 is limited to 5 simultaneous logins.

linuxbuddies.com » User administration

How to disable a specific command(s) for a certain user.

Limit number of Shell logins by a USER or GROUP