In our cluster with PBS batch system (torque) installed, we wish all the users execute their jobs by qsub so that the CPU resources can be well managed. However, it is found that users in our cluster can still directly run their programs directly in their bash shell.
I have noticed that some other cluster systems have restricted users from running their own binary. their command prompt is different from full priviliged command prompt.(starting from ~>)
qczhan2@barrine1:~>echo $0 -bash
In their configureation, users can run basic commands, like ls, pwd, cp and cd, but when usrs run their own binary, the system reminds "permission not allowd."
I am just wondering how to configure the system to be like that?
Thank you very much.
update: ? I have tried:
(a) mounting the filesystem with noexec option, but this method doesn’t allow user to run their binary from pbs as well.
(b) using restricted bash, but this method doesn’t even allow user to use “cd” command.