Suppose there are two users : user1 &amp; user2.  Now we know that if I give top -u user1, I can see only the process respective to user1.  But if I do top -u user2, I can see all the process running under user2.  Similar is the case with ps -f -U user1.  Is there a way to make ps &amp; top restrict to only see the processes running under their Id &amp; not others ?
122464
Is it possible to configure process hiding for certain user groups under a linux system?  For example: Users from group X should not see processes owned by users from group Y in ps/top or under /proc.  Is it possible to configure such a setup with SELinux?  (I vaguely remember a similar feature in the funny grsecurity patch set - but IIRC, it was more generic - and besides, I want to configure a stock linux distro without having to maintain a custom kernel.)  Edit: For better illustration, . The example is not that generic, but one can configure that a user or some users can only see information of their own processes in ps etc.
58408
I have tried to restrict user by editing sudoers file M ALL=!/bin/su. I am able to restrict sudo su - but not sudo -i.
31030
I'm want to grant a user administrative rights to one application on Windows 7. I don't want them to be able to have full admin rights, but admin rights are required for one of the applications they need to use.   Is there a way to set up a batch script or something where the user won't know it's being run as admin?  Or is there another way?  How can I accomplish this?
106659
Sometimes when I run a command I don't notice that I needed to run it as super user to have enough permission.  Is there a way to run the same command again but as a super user?
105116
Fr. Br. George told in  (it's in Russian) that there are some access rights that superuser can not violate. That is there are some access right which can forbid superuser doing something.  I was not able to find this information on the Internet and I'm curious what they are. This is probably something related to the system's core execution, isn't it? Maybe he can not stop some system processes? Or maybe he can not run a process in real mode?  This question is no related to SELinux (George was talking about it right before the question).
1601
I don't want the shared folder to be accessible by anyone on the system, I want it to be accessible just to a restricted set of users.  How to I do that?
67736
Does anyone know of a good way to set up some sort of parental controls so that one user account is subject to them, but not another?  A couple of friends of mine use Ubuntu and have kids (7 to 10 years old) who use the family computer. They'd like to have some blocking of adult sites. They're not going to supervise all the time, which I know might be ideal, but there we go. And they're not particularly technical, so they don't want to have to run scripts to turn the parental controls on and off regularly, but they can cope with having different accounts for different people. I haven't found a great way of doing this. I am pretty technical, so I'm happy to spend some time at the command line to set it up, but then it needs to just work.  Please don't just link to DansGuardian. If your answer doesn't address the different user account aspect, I will vote it down. If you want to talk about general parental controls that apply to all users then please start a new question - I'm sure that plenty of people would be interested in it, and I'll link to it from this question.
104392
I have a process that gets started by a damon running as root, now I want to "downgrade" this process's privileges to those of your average user. Is this possible? If yes how?  PS: Running unix on a mac
84549
We in our club have a computer with Windows 7 Professional that every club member may use. And everyone has their own separate account.   Those accounts have to have administrator priveleges since I want everyone to be able to install any software and use any feature they want. However, there is a single thing that they shouldn't be allowed to do - that is, look into another users' profiles. Now when anyone goes to 'c:\Users(Any User Name)' a little prompt appears that this folder is secured and whether you really want to look inside. Simply clickinh 'ok' give you access to any profile.  I tried disabling taking ownership for Administrators group in Group Policies but that had no effect. How can I effectively prohibit administrators looking into each others' profiles and documents?
22699
This morning, running top, I noticed a process I nave never seen before in my Ubuntu 18.04 laptop called MainThread, which was periodically using a lot of CPU . There was also an entry called Privileged Cont. I recently installed nordvpn, but nordvpn support said the process is not theirs. Is this a new part of the operating system? Is it malware? It has never appeared in top on my laptop before, as far as I know.
56744
How to block certain applications from opening on certain accounts (eg: Stop account John from opening Firefox or Gimp). It is assumed this is for the GUI and not the terminal and would only apply to specific users, so for example user X can open Gimp but not Firefox, user Z can open Software Center but not VirtualBox.  What good and easy way is there to do this for a new user of Ubuntu.
57850
I am sharing my personal Ubuntu PC with one of my colleagues.   I created another user with a different password (he knows of course) and added it to the sudoer list.   Given that there are two sudo users in a single Ubuntu system:   Are the private files (specified by owners and permissions) of any of these users still private?  Can I modify my colleague's files via sudo command, even sudo su, or vice versa?
88610
$ ls -l /usr/bin/sudo -rwsr-xr-x 1 root root 136808 Jul  4  2017 /usr/bin/sudo   so sudo is runnable by any user, and any user who runs sudo will have root as the effective user ID of the process because the set-user-id bit of /usr/bin/sudo is set.  From      the most visible difference between sudo and su is that sudo requires the user's password and su requires root's password.    Which user's password does sudo asks for? Is it the user represented by the real user ID of the process?   If yes, doesn't any user can gain the superuser privilege by running sudo and then providing their own password? Can Linux restrict that on some users? Is it correct thatsudo asks for the password after execve() starts to execute main() of /usr/bin/sudo?  Since the euid of the process has been changed to root (because the set-user-id bit of /usr/bin/sudo is set), what is the point of sudo asking for password later?   Thanks.  I have read , but it doesn't answer the questions above.
104658
Some time ago I had a user called "xy" on my system. I have deleted the user but in the /Users directory there are folders called "xy" with a Desktop, Library etc. in it.   Why are they not deleted and can I delete them manually?
123194
I have a process for an application which needs to run, but ends up using far too much IO usage for what it does. And really crashes my computer, making it impossible to do anything else whilst it is running.  So I was wondering if there is a way to limit IO usage, RAM and CPU for a given process? And its sub-processes of course.  This is on my Ubuntu 18.04 LTS system.
60433
How to kill all process of one user? When I make ps aux I obtain a list of process with several users, and I want to kill all process of user name1, for example. What's a command to do that in Ubuntu?
69998
Ref:   My Ubuntu user account name "user-3121" with type as "Administrator". There is one more account named "admin" with type as "Administrator". How can I be sure whether or not "admin" can login as me or otherwise view my files in "user-3121"?  I discussed this with the other user and we have tried to modify /etc/sudoers to protect my files:  Cmnd_Alias   SHELLS = /bin/sh,/bin/bash,/bin/ksh, /usr/bin/x11/passwd  Cmnd_Alias   SU = /usr/bin/su,/bin/su,/usr/bin/gksudo,/usr/bin/sudo,/usr/bin/su bash,/usr/bin/sudo /bin/bash,/usr/sbin/visudo  Cmnd_Alias   PASS = /usr/bin/passwd root,/bin/* * root,/bin/* * sysadmin,/bin/* * /home/sysadmin,/usr/bin/passwd  Cmnd_Alias      EDIT= /bin/* /etc/sudoers,/bin/* sudoers,/bin/* /etc/passwd,/bin/* passwd,/bin/* /etc/group,/bin/* group,/bin/* /etc/shadow,/bin/* shadow,/*/*/[a-z]* /etc/sudoers,/*/*/[a-z]* /etc/passwd,/*/*/[a-z]* /etc/group,/*/*/[a-z]* /etc/shadow,/*/*/[a-z]* sudoers,/*/*/[a-z]* passwd,/*/*/[a-z]* group,/*/*/[a-z]* shadow  Cmnd_Alias   CMDS = /usr/sbin/userdel * sysadmin,/usr/sbin/userdel sysadmin,/usr/sbin/deluser * sysadmin,/usr/sbin/deluser sysadmin  root    ALL=(ALL) ALL, !CMDS  %admin ALL=(ALL) ALL, !SHELLS, !SU, !CMDS, !PASS, !EDIT %sudo  ALL=(ALL) ALL,!SHELLS, !SU, !CMDS, !PASS, !EDIT  admin ALL=(ALL) ALL administrator ALL=(ALL) ALL   If "admin" can still read my data, how do I prevent that?  Also how does this configuration work, it allows "user-3121" to run some sudo commands, but it doesn't actually mention "user-3121" anywhere?  P.S. I'm the only person who knows the password for the "root" user, so that I can log in as root using the "su" command.