LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
Search this Thread
Old 04-15-2009, 04:02 PM   #1
sbabcock23
Member
 
Registered: Aug 2006
Location: Mississauga, Ontario, Canada
Distribution: RHEL 5, CentOS 5
Posts: 64

Rep: Reputation: 15
Default file ownership and ACL


Hi

There is a bunch of directories and files that I have set ACL's too so that users can create, delete, modify files or simply just read them. However if they create a new file, the default ownership of the file by just doing ls -l is there username and default group. I want the default owner of the file to be root so that they cannot chmod 777 on that file. They will still have access to it because of the acls, i just don't want them giving access to everyone
 
Old 04-17-2009, 01:07 AM   #2
grepmasterd
Member
 
Registered: Aug 2003
Location: Seattle
Distribution: ubuntu, lately
Posts: 182
Blog Entries: 1

Rep: Reputation: 35
sorry, users cannot create root-owned files, nor files with any ownership but their own.

Quote:
They will still have access to it because of the acls, i just don't want them giving access to everyone
They can do this anyway on other parts of the system (their home dirs, /tmp, etc). I'm not sure I see the point of restricting it here.
 
Old 04-17-2009, 03:02 AM   #3
tkedwards
Senior Member
 
Registered: Aug 2004
Location: Munich, Germany
Distribution: Opensuse 11.2
Posts: 1,549

Rep: Reputation: 51
Yeah, if a user has write access to a file then they can change the permissions (but not the ownership). It'd be better if you stated the problem you're trying to solve as I think you're looking at this the wrong way. If you have a group of users who work on a set of files that you don't want anyone else to have access to then put those users in a group, set the group ownership on those files to that group and finally set the setgid bit (chmod g+s).

There is no way to stop your users deliberately giving access to others to files that they can access. If they can write to the files they can change the permissions, if they can read them they can copy them to another part of the filesystem, a network drive, a USB drive etc. If you can't trust your users with important files don't give them access to them.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Default ACL and permissions inheritance mikemrh9 Linux - Security 4 02-18-2014 11:57 AM
Default ownership of files and directories linuxdevil Linux - Security 4 06-02-2011 06:25 AM
what is the default permission and ownership of /var/tmp/.oracle RMLinux Linux - Newbie 2 11-27-2008 07:23 PM
How to restore default Ownership for every folder in Linux. RMLinux Linux - Newbie 4 11-26-2008 02:25 AM
default files and folder acl permissions Baltasar Fedora 4 08-30-2004 12:50 PM


All times are GMT -5. The time now is 09:17 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration