How to limit user commands in Linux [closed]

Answer 1

@Dodzi Dzakuma solution is great if you only have a few commands that you wish to disable.

However if you only want to allow the user to run several commands, here is a better solution:

1. Change the user shell to restricted bash

   chsh -s /bin/rbash 
   

2. Create a bin directory under the user home directory

   sudo mkdir /home//bin
   sudo chmod 755 /home//bin
   

3. Change the user's default PATH to the bin directory

   echo "PATH=$HOME/bin" >> /home//.bashrc
   echo "export PATH >> /home//.bashrc
   

4. Create symlinks of the command(s) that the user require

   sudo ln -s /bin/ /home//bin/
   

5. Restrict the user from modifying ~/.bashrc

   chattr +i /home//.bashrc
   

This is better IF you only want to allow the user to run several commands because instead of setting aliases of ALL commands to disable, you only set the symlink of the commands that you wish to allow.