How can i disable terminal access with opendirectory ?
I'm deploying of a OSX Server over OSX Mountain Lion... And i need to limit the terminal (command line) access.
Any suggestion ??
Thanks in advance,
W
Mac mini, OS X Mountain Lion (10.8.5)
I'm deploying of a OSX Server over OSX Mountain Lion... And i need to limit the terminal (command line) access.
Any suggestion ??
Thanks in advance,
W
Mac mini, OS X Mountain Lion (10.8.5)
As Linc indicated setting an Open Directory account to have an invalid login shell will prevent the user from using Terminal. They will still be able to launch it but will not be able to do command line instructions nor double-click and run scripts, this effectively makes it unusable. You would do this setting using Workgroup Manager per user, it is possible to bulk apply this setting.
Alternative approaches would be to use MCX (Managed Preferences) to deny a user or group permission to run Terminal, or to do something similar via Profile Manager. (It appears that with Profile Manager rather than explicitly denying a particular application you have to grant access to desired applications and this implicitly means denying everything else, personally I find this approach to be bad and feel Apple should give the choice of both defining allowed applications and/or defining specific disallowed applications.)
I would not advise removing the Terminal application nor changing permissions on it.
Disabling Terminal would have no effect unless users are prevented from using any unauthorized application, such as a third-party terminal emulator.
Now that I think of it, my suggestion won't be completely effective either, because it's possible to run simple commands in Terminal without logging in to a shell at all.
In Directory Utility, set the login shell to an invalid value such as /bin/false.
How can i disable terminal access with opendirectory ?