I have many Linux servers each containing many users. Users can execute any command they want. They can also upload new scripts / programs and run them. What bother me is that some users go outside of their homes and start to look at other users homes or system folders like /etc /var etc. I don’t want them to be able to look at the host configurations files and start to hack.
I just want them to be able to access to their own homes, execute scripts in their homes and nothing more.
There is some solutions on internet like chroot but that come most of the time with other problems that needed to be solve.
I was wondering if it is just possible to remove “others” permission on all those system folders like /etc / var etc.. without breaking my linux host. I already did the same with my users homes and it works perfectly.
Thanks for your helps !
/etc/passwdsince the password hashes are stored in/etc/shadow, which isn't readable by everyone. Security-critical log files in/var/logare already not readable by everyone. Try reading/var/log/kern.logwithoutsudo. As far as configuration files, you might be able to restrict those to the user running the server or whatever in some instances.