From owner-freebsd-security Mon Apr 1 23:16:38 2002 Delivered-To: freebsd-security@freebsd.org Received: from phucking.kicks-ass.org (c-7d3a70d5.022-45-6f72652.cust.bredbandsbolaget.se [213.112.58.125]) by hub.freebsd.org (Postfix) with ESMTP id E1FCB37B416 for ; Mon, 1 Apr 2002 23:16:30 -0800 (PST) Received: from phucking.kicks-ass.org (localhost.kicks-ass.org [127.0.0.1]) by phucking.kicks-ass.org (Postfix) with SMTP id 5BBB3962; Tue, 2 Apr 2002 09:16:28 +0200 (CEST) Received: from 213.112.58.125 (SquirrelMail authenticated user z3l3zt) by phucking.kicks-ass.org with HTTP; Tue, 2 Apr 2002 09:16:28 +0200 (CEST) Message-ID: <1907.213.112.58.125.1017731788.squirrel@phucking.kicks-ass.org> Date: Tue, 2 Apr 2002 09:16:28 +0200 (CEST) Subject: Re: Stop usage of 'who'? [doing things the hard way] From: "Jesper Wallin" To: In-Reply-To: <20020402005030.D5931-100000@earl-grey.cloud9.net> References: <20020402005030.D5931-100000@earl-grey.cloud9.net> X-Priority: 3 Importance: Normal X-MSMail-Priority: Normal Cc: X-Mailer: SquirrelMail (version 1.2.5) MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org > On Tue, 2 Apr 2002, Jesper Wallin wrote: >> Hey.. This night I was taking a look at the local security and decided >> to make this system more like a it was a huge wall between all the >> users.. The first thing I wanted to do was to limit the access to top >> and ps.. This was done > > Did you want to limit the access to the top and ps binaries (type `man > chmod ; man chgrp`) or limit the information these binaries display? > eeeh?! How can that help me out? They just need to copy thier own bins from thier own system then? >> very easy with "sysctl -w kern.ps_showallprocs=0" and edit the >> /etc/sysctl.conf.. Now I want to stop usage of commands like w, who >> and > > When I looked at `man sysctl` the manpage said that "-w" has been > deprecated (i.e. the powers that be discourage its use) and my > /etc/sysctl.conf file is basically empty except for comments. > Well, try su and type "sysctl -w kern.ps_showallprocs=0" and run ps as a non-root user.. and I said that I edited the /etc/sysctr.conf.. ofcause it's empty by defualt.. add "kern.ps_showallprocs=0" if you don't want to retype it each time you need to reboot.. >> users.. I guess it must be able to change somewhere in the proc dir >> instead of changing the permissons on all the executables.. > > What? > What i ment was the log files.. sorry about that.. Just chmod the executables (optional) and change /var/run/utmp.. if you want to disable last(1) and lastlogin too, just simply chmod the /var/log/wtmp and /var/log/lastlog. >> Another thing I want to do (if it's possible) is to add a default >> quota.. > > I love when people ask if something is possible! Ahem, this is > FreeBSD?! > I know! I know! :) and it really owns! :) >> like, all new users who's being added will have about 500Mb of disk >> space.. > > In the /etc/rc.conf file > enable_quotas="NO" # turn on quotas on startup (or NO). > check_quotas="NO" # Check quotas on startup (or NO). > accounting_enable="YES" # Turn on process accounting (or NO). > > Change the first two to "YES" and also check out `man quota` for info. > I didn't mean that, I ment, when I add a user, the files in /usr/share/skel will be copied to the users home dir. I want his/her quota to be changed at the same time so I don't need to change it manually.. >> Jesper aka Z3l3zT > > What's a "zelezt?" > I lame computer geek who's too lazy to rtfm at 09:16AM with not an minute of sleep? ;) > -- > Peter Leftwich > President & Founder > Video2Video Services > Box 13692, La Jolla, CA, 92039 USA > +1-413-403-9555 //Jesper aka Z3l3zT To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message