From owner-freebsd-questions@FreeBSD.ORG Fri Jun 6 05:26:44 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 7C63E37B401 for ; Fri, 6 Jun 2003 05:26:44 -0700 (PDT) Received: from web41111.mail.yahoo.com (web41111.mail.yahoo.com [66.218.93.27]) by mx1.FreeBSD.org (Postfix) with SMTP id 1E3DD43F75 for ; Fri, 6 Jun 2003 05:26:44 -0700 (PDT) (envelope-from mwj_gb@yahoo.com) Message-ID: <20030606122644.53704.qmail@web41111.mail.yahoo.com> Received: from [195.224.255.134] by web41111.mail.yahoo.com via HTTP; Fri, 06 Jun 2003 13:26:44 BST Date: Fri, 6 Jun 2003 13:26:44 +0100 (BST) From: =?iso-8859-1?q?Mark=20Redding?= To: freebsd-questions@FreeBSD.ORG MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit Subject: passwd X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 06 Jun 2003 12:26:44 -0000 Hi all, I'm building a system (FreeBSD 4.7) which upon which I wish the majority of users to only have extremely limited access to (ie. to be able to telnet elsewhere). One of the things I've done is to "chmod o-rwx" most everything in /bin/ /sbin/ /usr/bin/ /usr/sbin/ and /usr/libexec/ The only commands that users can access now are "passwd" and "telnet" as I've changed permissions to give them "r-x" access to these commands, and also to /usr/libexec/ld.elf* The problem I have at present is that users can telnet, but they cannot issue the passwd command without getting :- passwd: permission denied Does anyone know what other commands passwd may be trying to execute, or of any way I can 'trace' the program to see what it's trying to do (I've KTRACE switched OFF in the kernel and have no intention of switching it on). thanks in advance, Mark Redding. ===== Mark W J Redding __________________________________________________ Yahoo! Plus - For a better Internet experience http://uk.promotions.yahoo.com/yplus/yoffer.html