LinuxMeister
security lock to prevent logging in to a Unix/Linux system using an application userid
#################################################################################################
# This is a security enhancement if a "generic" user account for an application is used.
# This is placed in /etc/profile or /etc/bashrc and FORCES an "su" to a generic or shared account
#
#################################################################################################
# Test to see if the user logging in is trying to use a restricted
# account and if they are, log them out. Developed 06/18/1997 on HP-UX using ksh.
# to update this determine path to "who", "sleep", "whoami" and test in bash or shell
#
# --> which whoami
# /usr/bin/whoami
#
# if generic accounts are "phredrick" or "infouser" then they must log in first as a different user.
# created because of a generic billing account opened a finanical system to abuse, as there
# was no way to know who was logged into the account accessing valuable resources.
# after this script snippet was placed in /etc/profile on an HP-UX system an individual
# was forced to su from his real account into the generic account, not realizing that
# his activities were now recorded in the systems logs... and he created over $10,000
# worth of product/services for his friends that were not paid for... but because of
# this forced "su" he was caught and prosecuted. Had this not been in place we would have
# only known what public computer system in the office might have been used.
#################################################################################################
# author: john meister 6/18/1997
#
#################################################################################################
#
case `/usr/bin/who am i | awk '{ print $1 }'`in
phredrick) if['/usr/bin/who am i | awk '{ print $1 }'`=`/user/bin/whoami`]
then
echo "###################"
echo " Please log in as an authorized user."
echo "###################"
/bin/sleep 4
exit;exit
fi;;
infouser) if[`/usr/bin/who am i | awk '{ print $1 }'`=`/usr/bin/whomai`]
then
echo "###################"
echo " Please log in as an authorized user."
echo "###################"
/bin/sleep 4
exit;exit
fi;;
esac
#
#################################################################################################
superdawg
SJ 1962 - 1991
-- tech / repair tips
SJ rigs - photos
the 1996 snowstorm
john's '83 Long bed J10
|
since September 24, 1998.
|
These copyrighted pictures
are available for purchase,
contact john at this domain.
|
books, toys, parts, etc.
for sale here, on CL, or ebay
shop here, support this site:
|
WJ 1999-2004
WJ rigs
XJ 1984-2001
XJ tech - repair tips
XJ rigs - photos
|
Search Tool
|
WILLYS /
JEEPS
|
AMSOIL
call 1-800-956-5695,
CUSTOMER NUMBER is 283461
FSJ Filters
XJ Filters
|
Nuts-Bolts-Wrench specs
DIESELS
Jetta TDI's
Mercedes Diesel info
calculate costs/mile
JohnMeister.com
|
SR9 cam
|
John's Diesel projects:
Jetta TDI, KJ CRD and J10s
john's vehicles
|
BIBLE info
Computer Science
LINUX
JohnMeister.com
tmp files
|
Bible Summary draft version
email john at johnmeister.com/jeep/sj
Trust Jesus.
Jesus Christ is Lord.
|
|
|
