Re: Stop usage of 'who'? [doing things the hard way]

From: Jesper Wallin (z3l3zt@phucking.kicks-ass.org)
Date: 04/02/02 

Date: Tue, 2 Apr 2002 09:16:28 +0200 (CEST)
From: "Jesper Wallin" <z3l3zt@phucking.kicks-ass.org>
To: <Hostmaster@Video2Video.Com>

> On Tue, 2 Apr 2002, Jesper Wallin wrote:
>> Hey.. This night I was taking a look at the local security and decided
>> to make this system more like a it was a huge wall between all the
>> users.. The first thing I wanted to do was to limit the access to top
>> and ps.. This was done
>
> Did you want to limit the access to the top and ps binaries (type `man
> chmod ; man chgrp`) or limit the information these binaries display?
>

eeeh?! How can that help me out? They just need to copy thier own bins from
thier own system then?

>> very easy with "sysctl -w kern.ps_showallprocs=0" and edit the
>> /etc/sysctl.conf.. Now I want to stop usage of commands like w, who
>> and
>
> When I looked at `man sysctl` the manpage said that "-w" has been
> deprecated (i.e. the powers that be discourage its use) and my
> /etc/sysctl.conf file is basically empty except for comments.
>

Well, try su and type "sysctl -w kern.ps_showallprocs=0" and run ps as a
non-root user.. and I said that I edited the /etc/sysctr.conf.. ofcause it's
empty by defualt.. add "kern.ps_showallprocs=0" if you don't want to retype
it each time you need to reboot..

>> users.. I guess it must be able to change somewhere in the proc dir
>> instead of changing the permissons on all the executables..
>
> What?
>

What i ment was the log files.. sorry about that.. Just chmod the
executables (optional) and change /var/run/utmp.. if you want to disable
last(1) and lastlogin too, just simply chmod the /var/log/wtmp and
/var/log/lastlog.

>> Another thing I want to do (if it's possible) is to add a default
>> quota..
>
> I love when people ask if something is possible! Ahem, this is
> FreeBSD?!
>

I know! I know! :) and it really owns! :)

>> like, all new users who's being added will have about 500Mb of disk
>> space..
>
> In the /etc/rc.conf file
> enable_quotas="NO" # turn on quotas on startup (or NO).
> check_quotas="NO" # Check quotas on startup (or NO).
> accounting_enable="YES" # Turn on process accounting (or NO).
>
> Change the first two to "YES" and also check out `man quota` for info.
>

I didn't mean that, I ment, when I add a user, the files in /usr/share/skel
will be copied to the users home dir. I want his/her quota to be changed at
the same time so I don't need to change it manually..

>> Jesper aka Z3l3zT
>
> What's a "zelezt?"
>

I lame computer geek who's too lazy to rtfm at 09:16AM with not an minute of
sleep? ;)

> --
> Peter Leftwich
> President & Founder
> Video2Video Services
> Box 13692, La Jolla, CA, 92039 USA
> +1-413-403-9555

//Jesper aka Z3l3zT

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message

Relevant Pages

  • Re[2]: Stop usage of who? [doing things the hard way]
    ... >> chmod; man chgrp`) or limit the information these binaries display? ... JW> executables and change /var/run/utmp.. ... I want his/her quota to be changed at ... JW> with "unsubscribe freebsd-security" in the body of the message ...
    (FreeBSD-Security)
  • RE: directory quota (not user disk quota)
    ... You would also need to chmod g+s the directory.. ... Dale Corse ... Then I would set the group's quota to ... > To unsubscribe, send any mail to ...
    (freebsd-isp)