Messages in this thread | | | Date | Tue, 12 Jan 1999 02:07:55 -0500 (EST) | From | Gregory Maxwell <> | Subject | Re: Disallowing user access to "listening" ports. |
| |
On Mon, 11 Jan 1999, Alexander Viro wrote:
> On Mon, 11 Jan 1999, Amanda Shuler wrote: > > > I apologize advance for my extreme lack of knowledge in linux development > > of any kind. I am only presuming to post to this list under the advice of > > a friend. > > > > I want to make it impossible for daemons to be started under any UID > > that is greater than 100, except for UID 65534. > > > > Some suggested that I make a patch for my kernel that would do something > > such as: > > > > if UID > 100 and UID != 65534 > > then "do not open socket" > > ... which means that your lusers will be unable to use email, news, FTP > *and* HTTP (i.e. no web for them). Is that *really* the thing you want?
Since I missed the first post, I'll reply here.. :)
What the poster probably would rather do is disable nohup to prevent users from leaving things running after they have logged off..
Doing this is a rather trivial kernel change, and I think I've seen patches floating around...
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/
| |