Super User

[TheQuirk]

I want to make a user that can have all root priviliges except the ability to access and certain directory. Possible? How?

[voidmain]

Why would you need root privilages on only a single directory? Why don't you set the permissions as such so the user in question has full power over that directory, as long as it is not a system directory that is. Don't mess with permissions on a system directory unless you know exactly what you are doing. Can you give an example of why you need them to have root capability?

[choasforages]

acls?

god in /usr/local and /home but can't do shit with /dev? is that what you are talking about? either way i don't know

[TheQuirk]

Well, out of pure interest. On my computer I have a backup script. . . Now, I want to make an account that can screw everything up, but can't do jack to the backup HD - that way, if something goes bad, I can just use the backup. I just don't want access to /home2 - and I don't want to be able to just chgrp. .  .

[voidmain]

Unmount the backup drive and remove it.    Or look into the chroot command. Better yet, use a virtual machine to screw around in (if you have VMware).

[TheQuirk]

quote:Originally posted by void main:
Unmount the backup drive and remove it.     Or look into the chroot command. Better yet, use a virtual machine to screw around in (if you have VMware).

Couldn't I make a "virtual private" account? I know they sell virtual-private servers, can't I make one for myself on my own compuper?

[voidmain]

I don't know exactly what you are referring to unless you mean like what the IBM mainframe does and has virtual machines. Again, VMware is one way of doing that. But there there is kernel level VM capabilities that I have read about and have not yet tried. Basically you will be partitioning your system into two running copies of Linux at the same time. I would have to do some digging on this. Search for "linux virtual machine" and it should come up with something... The only other way I can think of is with using "chroot" as I mentioned before.

[ December 11, 2002: Message edited by: void main ]

[voidmain]

Here's the Linux virtual machine I was referring to earlier. It's actually called "User-mode Linux". I might have to dig into this and try it out..

[TheQuirk]

Did I. . . Did I just challenge Void? Cool!

[voidmain]

Shit, I forgot the link!!!!!!! Here it is:

http://user-mode-linux.sourceforge.net/