Directory permissions

JJX · 11-26-2012, 09:04 AM

I am trying to configure correct permissions for smsd and nagios.

Nagios run a script and save the file in the directory /var/spool/sms/outgoing/ for further processing
smsd access the files for further processing.

The initial script runs as a "nagios" user and output file is owned by nagios user.
/var/spool/sms/outgoing/ has smsd:smsd permissions

Is there a way to force output file to inherit /var/spool/sms/outgoing/ directory permissions?

chmod +s /var/spool/sms/outgoing/
chmod g+s /var/spool/sms/outgoing/
dont seem to work...

Velotrol · 11-26-2012, 09:30 AM

Can't you put this directory as nagios' using chown? If you can't, you can put nagios in smsd group.

shivaa · 11-26-2012, 09:33 AM

Once try:

Code:

chmod g+xs /var/spool/sms/outgoing/

If it do not help, then mention what are permissions and group of output file. If group has all rights i.e. r, w, and x, then you can add user smsd to group of /var/spool/sms/outgoing/ after setting SGID on /var/spool/sms/outgoing/. So any newly added file to /var/spool/sms/outgoing/ will get same group as that of /var/spool/sms/outgoing/ has and smsd will be able to perform any actions on that output file.

JJX · 11-27-2012, 03:38 AM

Code:

# ll /usr/local/bin/sendsms
-rwxr-xr-x 1 root staff 512 Nov 26 17:02 /usr/local/bin/sendsms

# ll -d /var/spool/sms/
drwxrwxr-t 7 smsd smsd 4.0K Nov  7 15:47 /var/spool/sms/

# ll /var/spool/sms/
total 28K
drwxrwxr-t 7 smsd smsd 4.0K Nov  7 15:47 .
drwxr-xr-x 6 root root 4.0K Nov  7 15:47 ..
drwxrwsrwx 2 smsd smsd 4.0K Nov 27 11:30 checked
drwxrwsrwx 2 smsd smsd 4.0K Nov 27 11:30 failed
drwxrwsrwx 2 smsd smsd 4.0K Nov 27 11:30 incoming
drwsrwsrwx 2 smsd smsd 4.0K Nov 27 11:35 outgoing
drwxrwsrwx 2 smsd smsd 4.0K Nov 27 11:30 sent

root@davinci:/usr/local/bin# ./sendsms +30123456789 test1

root@davinci:/var/spool/sms# ll /var/spool/sms/outgoing/
total 12K
drwsrwsrwx 2 smsd smsd 4.0K Nov 27 11:37 .
drwxrwxr-t 7 smsd smsd 4.0K Nov  7 15:47 ..
-rw------- 1 root smsd   21 Nov 27 11:37 send_MhlIZ8

The file created has group permissions from smsd but owner is root!
Can I force owner change to "smsd"?

fakie_flip · 11-27-2012, 03:42 AM

You should read about sticky bit, SUID, and SGID. You're currently using all three.