Ubuntu

user privileges being ignored

Asked by Riz on 2009-11-02

Hi.
im using ubuntu 9.10 (karmic)
Have created 3 additional user accounts for my kids (as unprivileged users without wireless connection or modem connection). But for some reason they are still able to connect to the wireless network using their accounts and surf the web. Seems like the priviedges are being ignored or overridden.

Question information

Language:: English Edit question

Status:: Answered

For:: Ubuntu Edit question

Assignee:: No assignee Edit question

Last query:: 2009-11-04

Last reply:: 2009-11-05

Link existing bug

Revision history for this message

pe3k (qyx) said on 2009-11-04:

Hi Riz,
can you please specify how did you create those accounts and how did you ban the internet & wireless connectivity? ... There may be a problem ...

Revision history for this message

Riz (riz170) said on 2009-11-04:

Hi there.

Thanks for your response.

i created the accounts using the 'user accounts' gui found under system menu -> administration
each user account was created as an 'unprivalidged user' (as opposed to 'normal desktop user or administrator).

i have tried to block access to the internet by not assigning them the 'allow connection to wireless network' privilige. The privalige is found on the user privaliges tab of the user properties window.

Thanks for your support.
Do you work for Canonical or ubuntu?

Revision history for this message

pe3k (qyx) said on 2009-11-05:

Hi,
your way looks ok to me, but somehow the network rights are overwritten by network manager ...
Anyway there are other options:
(1) simple one - try adding iptables firewall rules to drop packets based on user-id:
sudo iptables -A OUTPUT -p tcp -m owner --uid-owner [user_name] -j DROP

More detailed here:
http://www.ubuntugeek.com/disable-internet-access-for-particular-user-in-ubuntu.html

(2) more precise way, by using some proxy, eg. Squid:
http://www.itresource.com.au/2008/08/31/deny-user-access-to-a-website-using-squid/

Try out these and let us know on results ...
No, I don't work for canonical, just normal user ...