Prevent Solaris users from changing file ownership (chown)

Home -> UNIX -> Solaris -> Security

From the computer of: qmchenry (339 recipes)
Created: Jul 05, 2004     Updated: Jul 17, 2004

Add to:

Users are typically able to change the owner of a file that they own. If you consider this a security risk or would like to prevent users from doing this for other reasons, follow the instructions in this recipe.

To prevent users from changing the ownership of their files, add the following line (or change the line if it already exists) in /etc/system:

A reboot of the system is required to make the settings take effect. Be careful when editing the /etc/system file as errors in the file can prevent a successful boot. Making a backup of the /etc/system file before making changes can save massive amounts of effort. See this recipe for details.

To allow users to change their file ownership, use the following line in /etc/system: