Questions tagged [restricted-access]

This tag discusses protection of data using system configuration or file-based permissions.

This tag discusses protecting data system configuration or file-based permissions. This tag may include questions on setting up access restrictions to any part of the Ubuntu operating system, or any filesystem under Ubuntu, or changing these restrictions.

107 questions
61
votes
4 answers

How to give nopasswd access to multiple commands via sudoers?

Below is what I know: I have to add this below line in sudoers file to give rights to the user for particular task. user_name ALL=NOPASSWD: /usr/bin/apt-get install In this case I want to give access to this user to restart 2 services (i.e. Apache…
Hrish
  • 2,399
35
votes
2 answers

Is there any way to stop a user from creating executables and running them?

Ransomware attacks could use zero-day exploits, but often an attacker will just fool a gullible user into running an executable by downloading and clicking. Suppose we have a naive user and want to restrict them to the normal path. Is there any way…
Dov
  • 833
13
votes
2 answers

How to give a normal user access only to the /var/log directory?

I have a non-admin user in Ubuntu 12.04 LTS desktop 32-bit OS to whom I need to give permissions only to access /var/log as he needs to monitor logs and create reports related to it. I do not want to give him admin access at any cost. How can I…
Hrish
  • 2,399
11
votes
1 answer

How can Snap permissions be viewed and modified?

One of the promoted advantages of Snap packages is the sandboxing-feature, where a Snap program may not be able to access as much system information as a package from the repository. Now, I have read a lot about permission problems with Snap…
Prototype700
  • 1,120
9
votes
2 answers

How to restrict ssh and ftp to certain ip address?

What is the easiest way to make it so that the only way anyone could access the ssh or ftp for my ubuntu machine is to be on a certain ip address?
kevCAI
  • 93
8
votes
1 answer

How to restrict a user from accessing a particular application?

I want to restrict an application being opened under ordinary privileges. Only root shall run the application, so that contents wont be seen by others and they wont change anything.
GKUTTY
  • 79
6
votes
1 answer

Restrict user access to GPU

I wish to restrict access to using a GPU (in terms of reserving memory on it) for certain users on a jointly used workstation. So if a user tries to access the GPU on SSH, for example via CUDA, that request would be denied. Any ideas where to start…
jmaxx
  • 163
5
votes
2 answers

How to create a very limited user on Ubuntu 14.04

I'm trying to make a safe workstation PC for sensitive data using Ubuntu 14.04. No user should have the right to: print, connect a USB flash drive to transfer files, send files via email or install new softwares. I'd like the restricted user to…
JMP
  • 51
5
votes
2 answers

How to restrict access to a NTFS partition to a standard (non-admin) user?

I am using Ubuntu 12.04. I have 4 NTFS partitions. I have made 2 users: One for myself (Admin) and one for family (standard/non-admin). I successfully restricted the access to my home folder from this standard user. Now I want to restrict it from…
Nirmik
  • 7,938
5
votes
4 answers

How to get the snap-based chromium to access a separately mounted filesystem?

I recently upgraded to Ubuntu 20.04 from the 18.04 version. Since then, the snap-based chromium browser that comes with 20.04 is unable to access any items in the /opt partition which I have separately mounted on my system. If I go to the trouble of…
HippoMan
  • 535
5
votes
2 answers

How to grant non-root user access only to /var/log directory

I have newly created non-root(normal) user and want to grant access only to /var/log directory so that the user can view and monitor the logs. The user should not be able to cd/ls or access the /etc directory and do anything else apart from viewing…
most2
  • 51
4
votes
2 answers

SSH message after login, then restrict the user from using account

I want to "block/restrict" one of the accounts on my dedicated server, but I want user to allow to log in, then i want the message to pop up for him (for example in putty) and then close connection (so the putty window will be up and he can read it,…
Eska
  • 495
4
votes
1 answer

How do I prevent root access from all TTYs

I am trying to secure root access on my Ubuntu servers (running 14.04 desktop and 16.04 server). I would like to disable root access on all TTYs except TTY1. I know this can be done by editing /etc/securetty, and commenting out all devices except…
user469510
4
votes
1 answer

How to allow users to create and delete file(s) / folder(s), but not modify them?

I have created a group name "app-data" and a folder /db-data/archived-data/ I want members of app-data to have all rights on /db-data/ folder but I want the same group users have only create and delete access on /db-data/archived-data/ folder (users…
Hrish
  • 2,399
4
votes
1 answer

Prevent specific users from turning off network connections

There is a customised Ubuntu 22.04 system with 4 users: user_a, user_b, user_c, user_d I want to prevent 2 users (user_c, user_d) from changing Ubuntu settings. I've already locked down the terminal for these users using rbash. Using setfacl, the…
1
2 3 4 5 6 7 8