I want to create a new user with a restricted shell so I :
ln -s bash rbash # create a symbolic link to bash with a name "rbash"
useradd -s /bin/rbash student # add a new user with a shell pointing to that symlink I've created
passwd student # create a password
su - student # Login as a user
However afterwards I can cd into wherever I want. It looks like a restricted shell doesn't work. Why ?
This problem: "Some results have been removed because Restricted Mode is enabled by your network administrator." and "This video is restricted. Try signing in with a G Suite account."
I am using ubuntu 18.04.4 lts. I encounter this error on youtube in all browsers. I'm sure the restricted mode is off but sometimes it happens sometimes not, so it doesn't always happen, but I couldn't understand what it's about. Besides, the error continues whether or not I am logged in. I cannot view many videos on youtube without using vpn. Windows is also installed on my computer, there is no such problem. ***I'm deleting this question a third time and asking again, is there really anyone to help?
I trying to setup my first SFTP server with disallowing timestamp preserve (default option in WINscp for example). I always want to take time from the server not from file.
First, I make group (ftpaccess) and user (user1 and user2 with restrictions).
a.sudo adduser user1
b.sudo adduser user2 --ingroup ftpaccess --shell /usr/sbin/nologin
sudo chown root:root /home/user2
sudo mkdir /home/user2/ftp
sudo chown user2:ftpaccess /home/user2/ftp
Works as expected. User2 gets access only to ftp folder.
Subsystem sftp internal-sftp -P setstat,fsetstat
That also works but only for user1 without ftpaccess group. User2 can preserve timestamp.
/etc/ssh/sshd_config:
Subsystem sftp internal-sftp -P setstat,fsetstat
Match group ftpaccess
ChrootDirectory %h
X11Forwarding no
AllowTcpForwarding no
ForceCommand internal-sftp
I need Your help and explanation what is the difference between users without any group and those with restricted access. And why sshd_config works only for one of them.
Whenever I try to update it gets stuck at 32% every time and fails.
someone@somewhere:~/$ sudo apt update
Ign:1 http://linux.dropbox.com/ubuntu wily InRelease
Get:2 http://linux.dropbox.com/ubuntu wily Release [6,596 B]
Ign:3 http://developer.download.nvidia.com/compute/cuda/repos/ubuntu1604/x86_64 InRelease
Ign:4 http://dl.google.com/linux/chrome/deb stable InRelease
Get:5 http://linux.dropbox.com/ubuntu wily Release.gpg [473 B]
Hit:6 http://developer.download.nvidia.com/compute/cuda/repos/ubuntu1604/x86_64 Release
Hit:7 http://repo.steampowered.com/steam precise InRelease
Hit:8 http://ca.archive.ubuntu.com/ubuntu xenial InRelease
Get:10 http://security.ubuntu.com/ubuntu xenial-security InRelease [107 kB]
Hit:11 http://ppa.launchpad.net/freecad-maintainers/freecad-stable/ubuntu xenial InRelease
Hit:12 https://download.sublimetext.com apt/stable/ InRelease
Hit:13 http://dl.google.com/linux/chrome/deb stable Release
Hit:15 https://dl.winehq.org/wine-builds/ubuntu xenial InRelease
Get:16 http://ca.archive.ubuntu.com/ubuntu xenial-backports InRelease [107 kB]
Hit:18 http://ppa.launchpad.net/kubuntu-ppa/backports/ubuntu xenial InRelease
Hit:19 http://ppa.launchpad.net/webupd8team/java/ubuntu xenial InRelease
Get:14 http://ca.archive.ubuntu.com/ubuntu xenial-updates InRelease [109 kB]
Hit:20 http://ppa.launchpad.net/wireshark-dev/stable/ubuntu xenial InRelease
Ign:21 http://ca.archive.ubuntu.com/ubuntu xenial-updates/main amd64 Packages
Ign:22 http://ca.archive.ubuntu.com/ubuntu xenial-updates/main i386 Packages
Ign:23 http://ca.archive.ubuntu.com/ubuntu xenial-updates/main Translation-en
Get:24 http://ca.archive.ubuntu.com/ubuntu xenial-updates/main amd64 DEP-11 Metadata [320 kB]
Get:25 http://ca.archive.ubuntu.com/ubuntu xenial-updates/main DEP-11 64x64 Icons [227 kB]
Ign:26 http://ca.archive.ubuntu.com/ubuntu xenial-updates/restricted amd64 Packages
32% [Connecting to ca.archive.ubuntu.com (2001:67c:1560:8001::11)]
It's preventing me from upgrading packages or updating the package list.
I administrate an Ubuntu 11.10 Server. I've installed tightvncserver on it so I can have a desktop environment on the server.
My issue now is, I'm running into issues with malicious people spamming the VNC server with authentication attempts. I've strengthened up the password, but it's still inconvenient as it restricts me from connecting as the person is using up all the authentication attempts.
There are pretty much around 5 IP addresses that should be able to ATTEMPT to authenticate to the VNC server, this person is using proxies from Romania, China, Korea, etc.
How can I accept authentication attempts to ONLY the IP addresses I specify?
Essentially, I want to do the opposite of this: How to deny VNC access to a particular IP?
And this with VNC instead: How can I allow SSH password authentication from only certain IP addresses?
Any ideas?
Thanks, Brandon