Rh9 question

[Zelfaldor]

I have a quick question. In my ccna class we just got a server setup for our lab. the server is running RH9 and I was wondering is there a way to block certin commands when you telnet into the server. any help would be greatly appreciated. BTW the instructor does not know herself on how to do this.

if this is in a tut I'm sorry but I missed it

[MrLinus]

Block certain commands on RH or CISCO? Remove the permissions would be the best option.

Research chmod and/or chown.

[Zelfaldor]

I would like to block the commands in RH

[steve.milner]

Firstly I would use SSH rather than telnet, since it's much more secure:

http://www.antionline.com/showthread...&highlight=SSH

(Sorry, I have no shame!)

To secure the commands you could change the permissions so that only root could execute them.

What commands were you thinking about?

[Zelfaldor]

really the only command that needs to be blocked is the 'su' command we dont need ppl telnetting in and shutting down the server when others are trying to work on it

[steve.milner]

You can do this globally so that only designated users can su

Okay - first create a group (start - system settings - users&groups) and call it something like CanSU and add any users that
are allowed to use the su command to that group.

These users will be allowed to su from telnet, but no one else will.


To finish type the following as root:

cd /bin
chgrp CanSU su
chmod o-x su


HTH