Linux Restrict Execution of /usr/sbin/userhelper to Console Users

I‘m CentOS Linux version 5.x user and I’d like to restrict execution of /usr/sbin/userhelper to console users only in xusers group?

ADVERTISEMENTS

/usr/sbin/userhelper is a helper interface to pam. From the man page:

This program provides a basic interface to change a user’s password, gecos information, and shell. The main difference between this program and its traditional equivalents is that prompts are written to standard out to make it easy for a GUI wrapper to interface to it as a child process.

Simply run the following command so that users in xusers group can use /usr/sbin/userhelper
groupadd xusers
usermod -aG xusers user1
usermod -aG xusers user2
usermod -aG xusers userN
chgrp xusers /usr/sbin/userhelper
chmod 4710 /usr/sbin/userhelper

🐧 Get the latest tutorials on SysAdmin, Linux/Unix, Open Source/DevOps topics:
CategoryList of Unix and Linux commands
File Managementcat
FirewallCentOS 8 OpenSUSE RHEL 8 Ubuntu 16.04 Ubuntu 18.04 Ubuntu 20.04
Network Utilitiesdig host ip nmap
OpenVPNCentOS 7 CentOS 8 Debian 10 Debian 8/9 Ubuntu 18.04 Ubuntu 20.04
Package Managerapk apt
Processes Managementbg chroot cron disown fg jobs killall kill pidof pstree pwdx time
Searchinggrep whereis which
User Informationgroups id lastcomm last lid/libuser-lid logname members users whoami who w
WireGuard VPNCentOS 8 Debian 10 Firewall Ubuntu 20.04

ADVERTISEMENTS
0 comments… add one

Leave a Reply

Your email address will not be published.

Use HTML <pre>...</pre>, <code>...</code> and <kbd>...</kbd> for code samples.