Restricting user access to a subset of binaries

Asked Dec 21 '18 at 12:53

Active Dec 21 '18 at 15:11

Viewed 40 times

I checked rbash and chroot jail, which doesn't have permission to read /var/log.

Scenario:

ssh user should only able to cd to a directory and do less for files.

eg:

ssh user@server.com
cd /var/log
less application.log

In short an user with global filesystem access with only one binary like less or more to read the file.

edited Dec 21 '18 at 15:11

asked Dec 21 '18 at 12:53

Rajesh Rajendran

That's not very useful. What about `tail` or `grep`? or `cut`? Or hundreds of other useful things one might do with log files. – Michael Hampton Dec 21 '18 at 17:08
Less is just a binary. Any such binary will suffice. – Rajesh Rajendran Dec 21 '18 at 17:12

0 Answers0