Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here. |
| Notices |
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
Are you new to LinuxQuestions.org? Visit the following links:
Site Howto |
Site FAQ |
Sitemap |
Register Now
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
 |
GNU/Linux Basic Guide
This 255-page guide will provide you with the keys to understand the philosophy of free software, teach you how to use and handle it, and give you the tools required to move easily in the world of GNU/Linux. Many users and administrators will be taking their first steps with this GNU/Linux Basic guide and it will show you how to approach and solve the problems you encounter.
Click Here to receive this Complete Guide absolutely free. |
|
 |
04-15-2009, 04:02 PM
|
#1
|
|
Member
Registered: Aug 2006
Location: Mississauga, Ontario, Canada
Distribution: RHEL 5, CentOS 5
Posts: 64
Rep:
|
Default file ownership and ACL
Hi
There is a bunch of directories and files that I have set ACL's too so that users can create, delete, modify files or simply just read them. However if they create a new file, the default ownership of the file by just doing ls -l is there username and default group. I want the default owner of the file to be root so that they cannot chmod 777 on that file. They will still have access to it because of the acls, i just don't want them giving access to everyone
|
|
|
|
04-17-2009, 01:07 AM
|
#2
|
|
Member
Registered: Aug 2003
Location: Seattle
Distribution: ubuntu, lately
Posts: 182
Rep:
|
sorry, users cannot create root-owned files, nor files with any ownership but their own.
Quote:
|
They will still have access to it because of the acls, i just don't want them giving access to everyone
|
They can do this anyway on other parts of the system (their home dirs, /tmp, etc). I'm not sure I see the point of restricting it here.
|
|
|
|
04-17-2009, 03:02 AM
|
#3
|
|
Senior Member
Registered: Aug 2004
Location: Munich, Germany
Distribution: Opensuse 11.2
Posts: 1,549
Rep:
|
Yeah, if a user has write access to a file then they can change the permissions (but not the ownership). It'd be better if you stated the problem you're trying to solve as I think you're looking at this the wrong way. If you have a group of users who work on a set of files that you don't want anyone else to have access to then put those users in a group, set the group ownership on those files to that group and finally set the setgid bit (chmod g+s).
There is no way to stop your users deliberately giving access to others to files that they can access. If they can write to the files they can change the permissions, if they can read them they can copy them to another part of the filesystem, a network drive, a USB drive etc. If you can't trust your users with important files don't give them access to them.
|
|
|
|
| Thread Tools |
Search this Thread |
|
|
|
Posting Rules
|
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
HTML code is Off
|
|
|
All times are GMT -5. The time now is 04:05 AM.
|
|
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.
|
Latest Threads
LQ News
|
|