====== Ubuntu - Compilers - Restrict Access to Compilers ======

Add a compiler group

Issue the following command:

<code bash>
sudo /usr/sbin/groupadd compiler
</code>

…and issue the following commands:

<code bash>
sudo chgrp compiler *cc*
sudo chgrp compiler *++*
sudo chgrp compiler ld
sudo chgrp compiler as
</code>

…and set permissions:

<code bash>
sudo chmod 750 *cc*
sudo chmod 750 *++*
sudo chmod 750 ld
sudo chmod 750 as
</code>

----

Create a group that will access the compiler-binaries:

<code bash>
groupadd compilers
</code>

Change ownership of the binary you want to restrict:

<code bash>
chown root:compilers /usr/bin/gcc
</code>

Change permissions to be executable only by root and members of the compilers group:

<code bash>
chmod 0750 /usr/bin/gcc
</code>