[K12OSN] HELP how to lock down profile and more???

[norbert]

Hi,

Gladly, but I'm stuck - see other posting, I can't get the script to 
work although it looks correct. Suggestions and editing of the script 
for other errors would be appreciated.

BTW I thought that by setting PURGE_PROCESS=NO & Setting LIMITS (for 
number of logins to) 1 might do the trick sadly that did not work ....

So back to the drawing board, the script looks promising but ........ 
arrrrrrrrrrrrrrhhhhh

thks
norbert

ddaniels at magic.fr wrote:

> I've begun a wiki page to capture the solution.
> http://www.k12ltsp.org/phpwiki/index.php/Limiting%20user%20processes%20at%20login 
>
>
> Norbert, once you get it working could you share what finally worked 
> for you?
> Thanks!
>
> Dennis
> Jeff Kinz wrote:
>
>> On Mon, Sep 20, 2004 at 10:53:02AM -0400, Shawn Powers wrote:
>>  
>>
>>> norbert wrote:
>>>   
>>>
>>>> do a "/.*" for all the dot files in the directory ?
>>>>     
>>>
>>> Sorry -- I replied to the wrong thread, you aren't trying to do an 
>>> "rm -rf" on files -- but still, using username/.* includes the 
>>> parent directory (usually /home) so you probably don't want to 
>>> fiddle with changing ownership, etc.
>>>
>>>   
>>
>>
>> I agree w/Shawn, and I'd like to point out that if you do the chmod
>> command as given to /.* (especially if you add the -R "apply
>> recursively option") you will definitely break some things for the user.
>> For example, you may break Internet browsing. Mozilla keeps each user's
>> cache under dotfile directory with the user's home directory.  if this
>> is not writable, browsing probably won't work.  This is just one
>> example of how things can be broken by applying large changes to the
>> user's dotfiles.  
>> I urge caution. (or at the very least some good experimentation and
>> testing on sample accounts prior to roll out).
>>
>>
>>  
>>
>
>
> _______________________________________________
> K12OSN mailing list
> K12OSN at redhat.com
> https://www.redhat.com/mailman/listinfo/k12osn
> For more info see <http://www.k12os.org>