Re: Restrict user to change group permission

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Monday 22 November 2004 15:29, Ed Wilts wrote:
> On Mon, Nov 22, 2004 at 03:09:05PM -0500, Reuben D. Budiardja wrote:
> > Is there a way to make any file and sub-directory under a directory is
> > owned by a certain group, have permission 'rw' for that group by default,
> > regardless who created the file and how the file was created, and
> > restricted for any user to change the group permission (ie. I want the
> > group permission to always be 'rw' so that even the user who created the
> > file under that directory cannot change the group permission )
>
> You can start with a chmod g+s /directory

Yes, I've been using that. 

I asked because every now and then I still found the group permission just 'r' 
on some files. When this happens, other user who is a member of the group 
would come to me complaining that he/she couldn't modify/delete the file 
(they are working on same project) and I had to get in as root to fix the 
permission. 
Most of my users are using winSCP to transfer files, and probably not geeky 
enough to know / make sure that the group permission is right. Only one or 
two would login using shell sometimes to do stuffs. I don't know if the 
ocassional cases where the group permission is wrong (ie. not the default) is 
because the owner modify them un-intentionally or if it's winSCP problem or 
what (any enlightenment ?). Therefore I thought if there were a way to 
restrict user to change the group permission, that'd be the easiest. 

> However, the owner a file can pretty much do what he wants, including
> changing the permissions.  SELinux might change that - I haven't
> researched this at all.

OK. I'll try to take a look at SELinux.

Thanks
RDB

-- 
Reuben D. Budiardja
Dept. Physics and Astronomy
University of Tennesse, Knoxville, TN

-----BEGIN GEEK CODE BLOCK-----
Version: 3.12
GIT/M/MU/P/S d-(++) s: a-- C++(+++) UL++++ P-- L+++>++++ E- W+++ 
N+ o? K- w--- !O M- V? !PS !PE Y PGP- t+ 5 X R- tv+ 
b++>+++ DI D(+) G e++>++++ h+(*) r++ y->++++
------END GEEK CODE BLOCK------

-- 
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list

[Index of Archives]     [CentOS]     [Kernel Development]     [PAM]     [Fedora Users]     [Red Hat Development]     [Big List of Linux Books]     [Linux Admin]     [Gimp]     [Asterisk PBX]     [Yosemite News]     [Red Hat Crash Utility]


  Powered by Linux