Questions tagged [account-restrictions]
The account-restrictions tag has no summary.
112 questions
0 votes
2 answers
68 views
When authenticating using keys, can OpenSSH handle LDAP policies (locked and idle users) also?
Most of the users are from an OpenDAP server, and users log in via SSH. Some users use a key to log in, some use a password. I have set up a password policy for LDAP, so users may become locked in ...
- 1,777
0 votes
1 answer
310 views
use setfacl to remove a users access to a directory?
So here is something I could not find any reference to, I have this user, user_A, I want to remove its access to this directory entirely /log/dirA As far as I understand, chmod is used to modify the ...
0 votes
1 answer
217 views
How to lock down Ubuntu linux so that only the active user can log in
I am new to linux and interested in only allow in login via direct access to the machine (active user). I don't even want to be able to log in remotely myself. Can someone please point me in the right ...
- 13
1 vote
0 answers
185 views
Block Particular Command in Linux for Specific Users
I want to whitelist some of the commands for users. I am getting solution using LShell Limited Shell but I want to restrict subcommands as well. I want user to access docker ps and docker logs only. ...
0 votes
0 answers
210 views
Account unlock is not happening even after unlock_time
I want to lock user account after 3 failed attempts, I am following this guide. I am using Ubuntu 14.04 (for jumphost purposes only). However, the automatic unlock is not happening after 10 minutes. ...
- 11
1 vote
2 answers
554 views
How to prevent other users from creating new SSH sessions?
When I work on Linux test server (Debian 11) I have root, and want block other users open new session to this server during my work. Is it possible?
- 115
1 vote
1 answer
448 views
Using sleep command in ssh authorized_key to prevent user's actions
I'm setting up an Ubuntu server to receive ssh connections from clients so I will then be able to connect back to their machine (reverse SSH tunneling). I searched for a way to prohibit any action ...
- 13
1 vote
0 answers
90 views
Restrict root to su local accounts
I know that root can modify any config file. As a best practice, I would like to disable the capacity for root to su on accounts which authenticates against NIS or Active Directory. As a best practice,...
- 143
4 votes
1 answer
3k views
How to check if unix account has been created with "--disabled-login" and "---disabled-password"
In Linux distributions like RedHat you can create a user with options --disabled-login and ---disabled-password (see man page for command adduser link). I wonder if it is possible to check for an ...
- 429
0 votes
2 answers
618 views
Accounts with no password - are these capable to be login?
When you install software on linux often users and groups get automatically created. I am wondering if during this user creation a "default" or "random" password will be set and if ...
- 429
1 vote
2 answers
2k views
Does /usr/sbin/nologin have any side effects?
Background: We have a policy in the company to deactivate the login possibility as much as possible, which is understandable. I am just wondering if there are any other side effects if you specify /...
- 429
0 votes
2 answers
528 views
Is it possible to prevent users to modify printer options in CUPS?
A small family setup... I have a color printer, and a Linux computer, with CUPS installed. I wan to allow the kids to print, but only in draft mode, and only in greyscale. With CUPS I prevented the ...
- 2,019
0 votes
1 answer
286 views
How to restrict a local user to a jail directory in linux?
I have searched on google for restrict a user to a specific directory but mostly appeared about ssh user, ftp user and etc that not local user. How do we do that for local user?
- 137
0 votes
0 answers
46 views
How to limit user to only cat & exit commands? [duplicate]
I would like to limit a user to only two commands: cat and exit. I've tried to edit visudo but it does not work. My OS version is CentOS 8.
- 11
0 votes
1 answer
778 views
Restrict some commands for user/group using sudoers (visudo)
I want to create group and want to allow the group to run all available commands except few commands. Can you please help me configure sudoers for the same. I checked but only found how to allow some ...
- 93