Before I have tried to do this using a phony user and iptables to execute commands that needs to be restricted. However now the commands need to read configuration set by each user's environment vars so it seems this way no longer works.

The OS is a RedHat and seems like the only solid alternative is SELinux. There is little about the best practises to configure SElinux policies beyond basic documentation and tutorial on the web. What is a recommended way to implement this functionality?


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.