From owner-freebsd-questions@FreeBSD.ORG  Tue Jul  8 09:14:59 2008
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 5D4BB106569A
	for <freebsd-questions@freebsd.org>;
	Tue,  8 Jul 2008 09:14:59 +0000 (UTC) (envelope-from juancr@dsa.es)
Received: from llca513-a.servidoresdns.net (llca513-a.servidoresdns.net
	[217.76.128.120])
	by mx1.freebsd.org (Postfix) with ESMTP id 1B9FB8FC15
	for <freebsd-questions@freebsd.org>;
	Tue,  8 Jul 2008 09:14:58 +0000 (UTC) (envelope-from juancr@dsa.es)
Received: from mail.dsa.es (localhost.localdomain [127.0.0.1])
	by llca513-a.servidoresdns.net (Postfix) with ESMTP id 633501104149
	for <freebsd-questions@freebsd.org>;
	Tue,  8 Jul 2008 10:45:11 +0200 (CEST)
Received: from 217.114.136.134 (SquirrelMail authenticated user faf352c)
	by mail.dsa.es with HTTP; Tue, 8 Jul 2008 08:45:11 -0000 (GMT)
Message-ID: <50744.217.114.136.134.1215506711.squirrel@mail.dsa.es>
Date: Tue, 8 Jul 2008 08:45:11 -0000 (GMT)
From: "DSA - JCR" <juancr@dsa.es>
To: freebsd-questions@freebsd.org
User-Agent: SquirrelMail/1.4.10a
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
Subject: How to disable that an user execute any command
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 08 Jul 2008 09:14:59 -0000

Hi all

I use FreeBSD 6.2, and GELI

I want to make an user for the only task of remove/insert the usb copy disk.

I have made a new user (operator group), and a shell task that ask for the
GELI password and fsck and mount the USB disk. This work fine under root.

but I think that if he/she want to make CTRL-C to the shell task, he can
stop the task and then enter in the system and look whatever he wants (for
example, how the things are done).

How can I stop him from entering this CTRL-C (and others than could be) ?

I want this because there is intelectual propierty behind this.


Thanks in advance

Juan Coruņa
Desarrollo de Software Atlantico