As you have pointed out it restricts the security granularity of the system, which in turn will lead to other "work arounds" to achieve better granlarity and those work arounds will ultimately lead to sloppiness, making Johns point very valid indeed. I am glad you found it funny, its always best to keep a light hearted approach and standback and laugh at yourself from time to time, it took you long enough but you got there in the end, and not through any lack of effort on your part either ;-) well done P. Feizhou wrote: > Peter Farrow wrote: > >> "This allows usera to give userb but no others (other than root of >> course) full permissions on files that usera wants to share with >> userb (0770). How else can usera do this if not via usera's group >> permissions" >> >> they cant if they are each in non joined groups, which is why 0770 is >> the same as 0700 > > > LOL. I cannot believe that the point was that because new users would > be created with their own uid and gid and their home directory > ownership set to the same makes a system more sloppy security wise. > > Other than this facilitating the future use/need for usera to allow > only select users to access some of usera's files, it makes no > difference to the 'security sloppiness' of the system. > _______________________________________________ > CentOS mailing list > CentOS@xxxxxxxxxx > http://lists.centos.org/mailman/listinfo/centos