Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Context user #86

Closed
kiarn opened this issue Mar 7, 2020 · 4 comments
Closed

Context user #86

kiarn opened this issue Mar 7, 2020 · 4 comments

Comments

@kiarn
Copy link
Member

kiarn commented Mar 7, 2020

Hello @HappyBasher !

We need some system users in order to restrict the sophomorix command :

a) student
b) teacher
c) bsz-student
d) bsz-teacher

Without home, without login, with bash, and sudoers file in sudoers.d with e.g. :

bsz-student ALL=(ALL) NOPASSWD: /usr/sbin/sophomorix-query
bsz-student ALL=(ALL) NOPASSWD: /usr/sbin/sophomorix-passwd

(same for student)

Thanks !

Arnaud

@HappyBasher
Copy link
Member

Which group, which uid?

@HappyBasher
Copy link
Member

Proposal:

  • group: nogroup (65534)
  • teacher: uid 1001
  • student: uid 1002
  • shell: /bin/sh
  • home: /home/$USER

OK?

@kiarn
Copy link
Member Author

kiarn commented Mar 7, 2020

Is /home/$USER necessary ?
uid 1001 may be already used, but it's not important, because I will get the uid with the username.

@HappyBasher
Copy link
Member

Ok, it works without home dir and we use uids 901 and 902.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants