Re: How to limit it ?

[Russell Coker <russell@coker.com.au>]

On Mon, 15 Nov 1999, Grzegorz Pawel Szostak wrote:
>Sollution is:
>place ulimit with apropriate options in /etc/profile
>Options are:
>-a max address space (KB)
>-c max core file size (KB)
>-d max data size (KB)
>etc..  like it is discribed in limits man page (man limits) but use
>lowercase instead uppercase.
>
>I think it will be enough.
>I think theres no information about it in the Internet.
>
>My next problem is how to hide other lines in /etc/passwd file and
>/etc/group ... One user should see only his own line.
>Any ideas ?

There are several possibilities.  If you just want to discourage casual
browsing then change the /etc/nsswitch.conf file to have
passwd: db

Then make the /etc/passwd file only readable by root and group shadow.  Then
programs such as "ls" will get the data from the database.  Put the following
in a root crontab entry:
make -C /var/lib/misc
Now you have security by obscurity for the contents of /etc/passwd.
If you want more than that try using LDAP for password authentication, but it
is REALLY difficult to setup, and some of the utility programs seem buggy.

I still haven't got LDAP working right...

-- 
Electronic information tampers with your soul.