Restricting user to read-only access for different folders in RHEL
Clash Royale CLAN TAG#URR8PPP
up vote
0
down vote
favorite
I have referred all the similar questions in this site, but couldn't find out the correct answer.
My requirement is that I have a user testUser where he should only access different folders /etc/apache/ and /var/www/html as a read-only user. Apart from these folders, he shouldn't be able to access any other folder.
In the jailroot process as per my understanding, we will create a folder /home/test and we will provide him the access to these folders. But, in my case, he should be able to access different folders as I mentioned above.
Is there any quick solution for this?
rhel chroot readonly jails
edited Nov 27 '17 at 13:23
Videonauth
1,038718
asked Nov 27 '17 at 12:22
Kiran
1
add a comment |Â
up vote
0
down vote
favorite
I have referred all the similar questions in this site, but couldn't find out the correct answer.
My requirement is that I have a user testUser where he should only access different folders /etc/apache/ and /var/www/html as a read-only user. Apart from these folders, he shouldn't be able to access any other folder.
In the jailroot process as per my understanding, we will create a folder /home/test and we will provide him the access to these folders. But, in my case, he should be able to access different folders as I mentioned above.
Is there any quick solution for this?
rhel chroot readonly jails
edited Nov 27 '17 at 13:23
Videonauth
1,038718
asked Nov 27 '17 at 12:22
Kiran
1
So you'll need to expand - what other folders should this user not access and importantly, why. By default, regular users on RHEL can't damage system files, and can't read any files that are considered to have secure content. Do you mean, the user should have read access to those folders, but no ability to change anything in them, and other users do need that ability, and that you don't mind if testUser can also access other systems as 'any normal Linux user'?
– EightBitTony
Nov 27 '17 at 12:27
1
Is this an ftp or sftp user or a normal interactive user? If interactive, what programs should the user be able to run? Not having access to/binand/usr/binmeans not being able to do much.
– Mark Plotnick
Nov 27 '17 at 13:20
@EightBitTony, for this testUser I don't want to see any other code files as well. So, I want to restrict him to these folders only. MarkPlotnick, he is a normal interactive user and he is not having any ftp access.
– Kiran
Nov 28 '17 at 5:23
Prevent any other 'code' files from being visible to a group testUser is in, or world. Interactive users need access to the rest of the system, but you're in control of the permissions of the files you don't want them to see.
– EightBitTony
Nov 28 '17 at 7:45
add a comment |Â
up vote
0
down vote
favorite
up vote
0
down vote
favorite
I have referred all the similar questions in this site, but couldn't find out the correct answer.
My requirement is that I have a user testUser where he should only access different folders /etc/apache/ and /var/www/html as a read-only user. Apart from these folders, he shouldn't be able to access any other folder.
In the jailroot process as per my understanding, we will create a folder /home/test and we will provide him the access to these folders. But, in my case, he should be able to access different folders as I mentioned above.
Is there any quick solution for this?
rhel chroot readonly jails
edited Nov 27 '17 at 13:23
Videonauth
1,038718
asked Nov 27 '17 at 12:22
Kiran
1
I have referred all the similar questions in this site, but couldn't find out the correct answer.
My requirement is that I have a user testUser where he should only access different folders /etc/apache/ and /var/www/html as a read-only user. Apart from these folders, he shouldn't be able to access any other folder.
In the jailroot process as per my understanding, we will create a folder /home/test and we will provide him the access to these folders. But, in my case, he should be able to access different folders as I mentioned above.
Is there any quick solution for this?
rhel chroot readonly jails
edited Nov 27 '17 at 13:23
Videonauth
1,038718
asked Nov 27 '17 at 12:22
Kiran
1
edited Nov 27 '17 at 13:23
Videonauth
1,038718
edited Nov 27 '17 at 13:23
Videonauth
1,038718
edited Nov 27 '17 at 13:23
Videonauth
1,038718
1,038718
asked Nov 27 '17 at 12:22
Kiran
1
asked Nov 27 '17 at 12:22
Kiran
1
asked Nov 27 '17 at 12:22
Kiran
1
1
So you'll need to expand - what other folders should this user not access and importantly, why. By default, regular users on RHEL can't damage system files, and can't read any files that are considered to have secure content. Do you mean, the user should have read access to those folders, but no ability to change anything in them, and other users do need that ability, and that you don't mind if testUser can also access other systems as 'any normal Linux user'?
– EightBitTony
Nov 27 '17 at 12:27
1
Is this an ftp or sftp user or a normal interactive user? If interactive, what programs should the user be able to run? Not having access to/binand/usr/binmeans not being able to do much.
– Mark Plotnick
Nov 27 '17 at 13:20
@EightBitTony, for this testUser I don't want to see any other code files as well. So, I want to restrict him to these folders only. MarkPlotnick, he is a normal interactive user and he is not having any ftp access.
– Kiran
Nov 28 '17 at 5:23
Prevent any other 'code' files from being visible to a group testUser is in, or world. Interactive users need access to the rest of the system, but you're in control of the permissions of the files you don't want them to see.
– EightBitTony
Nov 28 '17 at 7:45
add a comment |Â
So you'll need to expand - what other folders should this user not access and importantly, why. By default, regular users on RHEL can't damage system files, and can't read any files that are considered to have secure content. Do you mean, the user should have read access to those folders, but no ability to change anything in them, and other users do need that ability, and that you don't mind if testUser can also access other systems as 'any normal Linux user'?
– EightBitTony
Nov 27 '17 at 12:27
1
Is this an ftp or sftp user or a normal interactive user? If interactive, what programs should the user be able to run? Not having access to/binand/usr/binmeans not being able to do much.
– Mark Plotnick
Nov 27 '17 at 13:20
@EightBitTony, for this testUser I don't want to see any other code files as well. So, I want to restrict him to these folders only. MarkPlotnick, he is a normal interactive user and he is not having any ftp access.
– Kiran
Nov 28 '17 at 5:23
Prevent any other 'code' files from being visible to a group testUser is in, or world. Interactive users need access to the rest of the system, but you're in control of the permissions of the files you don't want them to see.
– EightBitTony
Nov 28 '17 at 7:45
So you'll need to expand - what other folders should this user not access and importantly, why. By default, regular users on RHEL can't damage system files, and can't read any files that are considered to have secure content. Do you mean, the user should have read access to those folders, but no ability to change anything in them, and other users do need that ability, and that you don't mind if testUser can also access other systems as 'any normal Linux user'?
– EightBitTony
Nov 27 '17 at 12:27
So you'll need to expand - what other folders should this user not access and importantly, why. By default, regular users on RHEL can't damage system files, and can't read any files that are considered to have secure content. Do you mean, the user should have read access to those folders, but no ability to change anything in them, and other users do need that ability, and that you don't mind if testUser can also access other systems as 'any normal Linux user'?
– EightBitTony
Nov 27 '17 at 12:27
1
1
Is this an ftp or sftp user or a normal interactive user? If interactive, what programs should the user be able to run? Not having access to
/bin and /usr/bin means not being able to do much.– Mark Plotnick
Nov 27 '17 at 13:20
Is this an ftp or sftp user or a normal interactive user? If interactive, what programs should the user be able to run? Not having access to
/bin and /usr/bin means not being able to do much.– Mark Plotnick
Nov 27 '17 at 13:20
@EightBitTony, for this testUser I don't want to see any other code files as well. So, I want to restrict him to these folders only. MarkPlotnick, he is a normal interactive user and he is not having any ftp access.
– Kiran
Nov 28 '17 at 5:23
@EightBitTony, for this testUser I don't want to see any other code files as well. So, I want to restrict him to these folders only. MarkPlotnick, he is a normal interactive user and he is not having any ftp access.
– Kiran
Nov 28 '17 at 5:23
Prevent any other 'code' files from being visible to a group testUser is in, or world. Interactive users need access to the rest of the system, but you're in control of the permissions of the files you don't want them to see.
– EightBitTony
Nov 28 '17 at 7:45
Prevent any other 'code' files from being visible to a group testUser is in, or world. Interactive users need access to the rest of the system, but you're in control of the permissions of the files you don't want them to see.
– EightBitTony
Nov 28 '17 at 7:45
add a comment |Â
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f407276%2frestricting-user-to-read-only-access-for-different-folders-in-rhel%23new-answer', 'question_page');
);
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
So you'll need to expand - what other folders should this user not access and importantly, why. By default, regular users on RHEL can't damage system files, and can't read any files that are considered to have secure content. Do you mean, the user should have read access to those folders, but no ability to change anything in them, and other users do need that ability, and that you don't mind if testUser can also access other systems as 'any normal Linux user'?
– EightBitTony
Nov 27 '17 at 12:27
1
Is this an ftp or sftp user or a normal interactive user? If interactive, what programs should the user be able to run? Not having access to
/binand/usr/binmeans not being able to do much.– Mark Plotnick
Nov 27 '17 at 13:20
@EightBitTony, for this testUser I don't want to see any other code files as well. So, I want to restrict him to these folders only. MarkPlotnick, he is a normal interactive user and he is not having any ftp access.
– Kiran
Nov 28 '17 at 5:23
Prevent any other 'code' files from being visible to a group testUser is in, or world. Interactive users need access to the rest of the system, but you're in control of the permissions of the files you don't want them to see.
– EightBitTony
Nov 28 '17 at 7:45