Assuming that such a scenario, I have a Linux host root access, need to assign multiple functional remote user accounts for different Linux operation function module and operational work, customize their access to files and executable commands, unauthorized operation, not any implementation approach or the existing framework

CodePudding user response:

General control access permissions, either limited his access to the directory, is he home directory, or through the access control
Executable commands, which can be a bin directory in the account home directory, and then with a copy of instructions to the bin below, and then modify the path variable to the bin directory of this account, so this account can only use the bin the instructions below