[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: create a restricted user



On Sat, 2005-06-04 at 22:54 +0200, Zacharie Elcor wrote:
> I think I found a way to do it :
> In my visitor's .bashrc, I added :
> 
> if [ -z $DISPLAY ]
> then
> logout
> fi
> 
> If the visitor tries to log in graphically, he can only do what
> firefox allows him to do (perhaps should I use a more simple browser
> because of extensions my visitor could add) and if he tries to log in
> via ctrl-alt-f1, he is logged out immediately.

And supposing your visitor logs in using ssh with X forwarding turned
on?

Security is *hard* I'm afraid.

Paul.
-- 
Paul Howarth <paul city-fan org>


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]