Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email email@example.com
From: Nickolay A. Kritsky (nkritskyinternethelp.ru)
Date: Tue Apr 02 2002 - 01:27:47 CST
Tuesday, April 02, 2002, 11:16:28 AM, you wrote:
>> On Tue, 2 Apr 2002, Jesper Wallin wrote:
>>> Hey.. This night I was taking a look at the local security and decided
>>> to make this system more like a it was a huge wall between all the
>>> users.. The first thing I wanted to do was to limit the access to top
>>> and ps.. This was done
>> Did you want to limit the access to the top and ps binaries (type `man
>> chmod ; man chgrp`) or limit the information these binaries display?
JW> eeeh?! How can that help me out? They just need to copy thier own bins from
JW> thier own system then?
AFAIK top must be sgid kmem to run. and, as somebody had already
mentioned, ps can be restricted with kern.ps_showallprocs=0.
>>> users.. I guess it must be able to change somewhere in the proc dir
>>> instead of changing the permissons on all the executables..
JW> What i ment was the log files.. sorry about that.. Just chmod the
JW> executables (optional) and change /var/run/utmp.. if you want to disable
JW> last(1) and lastlogin too, just simply chmod the /var/log/wtmp and
>>> Another thing I want to do (if it's possible) is to add a default
>> I love when people ask if something is possible! Ahem, this is
JW> I know! I know! :) and it really owns! :)
>>> like, all new users who's being added will have about 500Mb of disk
>> In the /etc/rc.conf file
>> enable_quotas="NO" # turn on quotas on startup (or NO).
>> check_quotas="NO" # Check quotas on startup (or NO).
>> accounting_enable="YES" # Turn on process accounting (or NO).
>> Change the first two to "YES" and also check out `man quota` for info.
JW> I didn't mean that, I ment, when I add a user, the files in /usr/share/skel
JW> will be copied to the users home dir. I want his/her quota to be changed at
JW> the same time so I don't need to change it manually..
use quota for group "lusers" ?
man quota |grep -2 -e "-g"
>>> Jesper aka Z3l3zT
>> What's a "zelezt?"
JW> I lame computer geek who's too lazy to rtfm at 09:16AM with not an minute of
JW> sleep? ;)
>> Peter Leftwich
>> President & Founder
>> Video2Video Services
>> Box 13692, La Jolla, CA, 92039 USA
JW> //Jesper aka Z3l3zT
JW> To Unsubscribe: send mail to majordomoFreeBSD.org
JW> with "unsubscribe freebsd-security" in the body of the message
To Unsubscribe: send mail to majordomoFreeBSD.org
with "unsubscribe freebsd-security" in the body of the message