From owner-freebsd-security Mon Apr 1 20:45: 6 2002 Delivered-To: freebsd-security@freebsd.org Received: from phucking.kicks-ass.org (c-7d3a70d5.022-45-6f72652.cust.bredbandsbolaget.se [213.112.58.125]) by hub.freebsd.org (Postfix) with ESMTP id 2AA2A37B405 for ; Mon, 1 Apr 2002 20:45:03 -0800 (PST) Received: from phucking.kicks-ass.org (localhost.kicks-ass.org [127.0.0.1]) by phucking.kicks-ass.org (Postfix) with SMTP id 25ECF91F for ; Tue, 2 Apr 2002 06:44:56 +0200 (CEST) Received: from 213.112.58.125 (SquirrelMail authenticated user z3l3zt) by phucking.kicks-ass.org with HTTP; Tue, 2 Apr 2002 06:44:56 +0200 (CEST) Message-ID: <1501.213.112.58.125.1017722696.squirrel@phucking.kicks-ass.org> Date: Tue, 2 Apr 2002 06:44:56 +0200 (CEST) Subject: Stop usage of "who"? From: "Jesper Wallin" To: X-Priority: 3 Importance: Normal X-MSMail-Priority: Normal X-Mailer: SquirrelMail (version 1.2.5) MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hey.. This night I was taking a look at the local security and decided to make this system more like a it was a huge wall between all the users.. The first thing I wanted to do was to limit the access to top and ps.. This was done very easy with "sysctl -w kern.ps_showallprocs=0" and edit the /etc/sysctl.conf.. Now I want to stop usage of commands like w, who and users.. I guess it must be able to change somewhere in the proc dir instead of changing the permissons on all the executables.. Another thing I want to do (if it's possible) is to add a default quota.. like, all new users who's being added will have about 500Mb of disk space.. Jesper aka Z3l3zT To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message