Linux Restrict Execution of /usr/sbin/userhelper to Console Users

by Vivek Gite on January 3, 2009 · 0 comments

I'm CentOS Linux version 5.x user and I'd like to restrict execution of /usr/sbin/userhelper to console users only in xusers group?

/usr/sbin/userhelper is a helper interface to pam. From the man page:

This program provides a basic interface to change a user’s password, gecos information, and shell. The main difference between this program and its traditional equivalents is that prompts are written to standard out to make it easy for a GUI wrapper to interface to it as a child process.

Simply run the following command so that users in xusers group can use /usr/sbin/userhelper
groupadd xusers
usermod -aG xusers user1
usermod -aG xusers user2
usermod -aG xusers userN
chgrp xusers /usr/sbin/userhelper
chmod 4710 /usr/sbin/userhelper

Featured Articles:

Share this with other sys admins!
Facebook it - Tweet it - Print it -

Leave a Comment

You can use these HTML tags and attributes for your code and commands: <strong> <em> <ol> <li> <u> <ul> <blockquote> <pre> <a href="" title="">
What is 4 + 13 ?
Please leave these two fields as-is:
Solve the simple math so we know that you are a human and not a bot.




Tagged as: , , , , , , , , , , , ,

Previous post:

Next post: