user privileges being ignored

Asked by Riz on 2009-11-02

Hi.
im using ubuntu 9.10 (karmic)
Have created 3 additional user accounts for my kids (as unprivileged users without wireless connection or modem connection). But for some reason they are still able to connect to the wireless network using their accounts and surf the web. Seems like the priviedges are being ignored or overridden.

Question information

Language:
English Edit question
Status:
Answered
For:
Ubuntu Edit question
Assignee:
No assignee Edit question
Last query:
2009-11-04
Last reply:
2009-11-05
pe3k (qyx) said : #1

Hi Riz,
can you please specify how did you create those accounts and how did you ban the internet & wireless connectivity? ... There may be a problem ...

Riz (riz170) said : #2

Hi there.

Thanks for your response.

i created the accounts using the 'user accounts' gui found under system menu -> administration
each user account was created as an 'unprivalidged user' (as opposed to 'normal desktop user or administrator).

i have tried to block access to the internet by not assigning them the 'allow connection to wireless network' privilige. The privalige is found on the user privaliges tab of the user properties window.

Thanks for your support.
Do you work for Canonical or ubuntu?

pe3k (qyx) said : #3

Hi,
your way looks ok to me, but somehow the network rights are overwritten by network manager ...
Anyway there are other options:
(1) simple one - try adding iptables firewall rules to drop packets based on user-id:
sudo iptables -A OUTPUT -p tcp -m owner --uid-owner [user_name] -j DROP

More detailed here:
http://www.ubuntugeek.com/disable-internet-access-for-particular-user-in-ubuntu.html

(2) more precise way, by using some proxy, eg. Squid:
http://www.itresource.com.au/2008/08/31/deny-user-access-to-a-website-using-squid/

Try out these and let us know on results ...
No, I don't work for canonical, just normal user ...

Riz (riz170) said : #4

will do, thanks.
ill report back as ssson as i can.
Riz

Can you help with this problem?

Provide an answer of your own, or ask Riz for more information if necessary.

To post a message you must log in.