Ability to Disable Terminal for specific user

[CoreKit-glitch]

Hello Guys,

Thanks you for your job !

Is there a way to disable "terminal" for specific users ?

my aim is to provide cockpit access to consult specific datas (metrics, logs, services) but i don't want users to have a terminal access.

i saw it's possible to "hide" the menu but it's not totally disabled right ?

Thanks for your helps

[jelly]

You can override the manifest.json and hide the terminal page but it wouldn't change anything about the access the user would have to the system.

[CoreKit-glitch]

indeed, it doesn't avoid access to http://[host]:9090/cockpit+app/@localhost/system/terminal.html :(

But it remove the menu after changing manifest.json in /usr/share/cockpit/systemd.

There's no other way to disable, remove terminal ? (and keep it disabled/removed after package updates dnf,apt) ?

[jelly]

No there isn't it is part of cockpit-system, and removing terminal access doesn't prevent users being able to execute arbitrary commands.

Locking down specific commands for a user is a hard problem and not something Cockpit will solve.

[CoreKit-glitch]

ok i understand.

My aim was to provide throuhg cockpit a web interface to saw metrics, logs, services status for users, like a readonly way.

It seems if user doesn't have an homedir, terminal will not work in cockpit.

Might it'll help someone else.