Practical Linux Security Cookbook

Defining user authorization controls

Defining user authorization on a computer mainly deals with deciding the activities that a user may or may not be allowed to do. This could include activities such as executing a program or reading a file.

Since the root account has all privileges, authorization controls mainly deal with allowing or disallowing root access to user accounts.

Getting started...

To see how user authorization works, we need a user account to try the commands on. Hence, we create a couple of user accounts, user1 and user2, to try the commands.

How to do it...

In this section, we will go through various controls which can be applied on user accounts.

1. Suppose we have two user accounts, user1 and user2. We log in from user2 and then try ...