07-22-2014, 02:41 PM
ke5wxw & Valtam,
Excuse me if I'm wrong here. SUID seems to be for setting programs that would run with normal USER credentials to run instead as ROOT. If I understand ke5wxw's objective correctly, it sounds like he/she might be looking to do the opposite -- limit ability of son to do ROOT related things like install/remove software, change system settings, etc.
I don't know how to limit use to just certain programs, but you can easily set-up son's user account to have no ability to do things as ROOT, making it virtually impossible for him to do something that would harm the system. If that is what you were looking to do ke5wxw, just open the Help Manual to the Install page and go to the section on Adding another user. (Or you can read same page online here: https://www.freecinema2022.gq/manual/install.html#adduser.)
Just create his user account and make sure not to make it part of "sudo" group. After looking it up (because I didn't know this myself), the "adm" group is not same as "sudo" group. The "adm" group allows users to read log files. If you want, you can uncheck that group on son's account as well -- though he won't be able to hurt the system if you leave it enabled.
Regarding limiting him to using only certain programs: there may be a way to do that, but I don't know it off-hand. An easy "cheat" way to do it is to just hide the programs in the main Menu. (That won't actually limit ability to use them, they just won't show up in Menu for him to choose. If he figures out how to unhide them or that he could still launch them from a terminal, then he'll still be able to use them.) To hide them from view on the Menu, just right-click the Menu button on the panel and choose "Edit Applications". Click the different categories of applications on the left side and the programs listed under them will show on the right. Just uncheck any that you don't want to show under a particular category of applications. When done, you'll see that they no longer show in the Menu. Reverse process to get applications to show up again.
Excuse me if I'm wrong here. SUID seems to be for setting programs that would run with normal USER credentials to run instead as ROOT. If I understand ke5wxw's objective correctly, it sounds like he/she might be looking to do the opposite -- limit ability of son to do ROOT related things like install/remove software, change system settings, etc.
I don't know how to limit use to just certain programs, but you can easily set-up son's user account to have no ability to do things as ROOT, making it virtually impossible for him to do something that would harm the system. If that is what you were looking to do ke5wxw, just open the Help Manual to the Install page and go to the section on Adding another user. (Or you can read same page online here: https://www.freecinema2022.gq/manual/install.html#adduser.)
Just create his user account and make sure not to make it part of "sudo" group. After looking it up (because I didn't know this myself), the "adm" group is not same as "sudo" group. The "adm" group allows users to read log files. If you want, you can uncheck that group on son's account as well -- though he won't be able to hurt the system if you leave it enabled.
Regarding limiting him to using only certain programs: there may be a way to do that, but I don't know it off-hand. An easy "cheat" way to do it is to just hide the programs in the main Menu. (That won't actually limit ability to use them, they just won't show up in Menu for him to choose. If he figures out how to unhide them or that he could still launch them from a terminal, then he'll still be able to use them.) To hide them from view on the Menu, just right-click the Menu button on the panel and choose "Edit Applications". Click the different categories of applications on the left side and the programs listed under them will show on the right. Just uncheck any that you don't want to show under a particular category of applications. When done, you'll see that they no longer show in the Menu. Reverse process to get applications to show up again.
Try Linux Beginner Search Engine for answers to Linux questions.