LinuxQuestions.org
Support LQ: Use code LQ3 and save $3 on Domain Registration
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
Search this Thread
Old 07-09-2010, 08:35 AM   #1
c0pe
LQ Newbie
 
Registered: Jul 2010
Posts: 22

Rep: Reputation: 0
filesystem permissions question - making so user can't change permissions?


Hello,

I need to allow users to read, create and modify files and subdirectories but I don't want them to be able to modify the owner or permissions, can this be done with filesystem permissions? Using CentOS 5.5.
 
Old 07-09-2010, 10:56 AM   #2
dcellis1950
LQ Newbie
 
Registered: Nov 2009
Posts: 14

Rep: Reputation: 2
I don't think there is a way to do this with the standard Unix permissions. If you can write to a file, you can change permissions.

However, if you have time on your hands and can learn to use SELinux, there should be a way to do it there.
 
1 members found this post helpful.
Old 07-09-2010, 02:21 PM   #3
anomie
Senior Member
 
Registered: Nov 2004
Location: Texas
Distribution: RHEL, Scientific Linux, Debian, Fedora, Lubuntu, FreeBSD
Posts: 3,930
Blog Entries: 5

Rep: Reputation: Disabled
You can get close to the desired effect with shared group membership, and then group ownership (with the sgid bit on directories) for the files.

The problem is: when a user creates a new file s/he will be the owner.

Selinux is one idea for solving that problem. Another is removing read/execute permissions from /bin/chmod and /bin/chown for everyone but root. (That may have some other unintended consequences, though.)
 
1 members found this post helpful.
Old 07-12-2010, 07:51 AM   #4
c0pe
LQ Newbie
 
Registered: Jul 2010
Posts: 22

Original Poster
Rep: Reputation: 0
ok, thanks for the info, it's appreciated.
 
Old 07-12-2010, 09:06 AM   #5
c0pe
LQ Newbie
 
Registered: Jul 2010
Posts: 22

Original Poster
Rep: Reputation: 0
marking thread as solved, since my real question was can this be done with the standard file permissions, and I got the answer, it can not. But thanks for the possible alternatives, I appreciate it.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
How do I recreate a linux user w/o impacting existing filesystem/permissions/shell..? linuxeth123 Linux - Newbie 1 06-01-2010 12:54 PM
Change Permissions For Read-Only Filesystem rc nai Slackware 2 06-21-2008 05:20 PM
How do I change permissions for a folder on an NTFS filesystem? arthur42dent Linux - Security 3 02-15-2008 08:14 PM
Change my user to root permissions metalaid Linux - Newbie 5 01-19-2004 08:17 PM
How to change permissions for Mounted Filesystem leroy27336 Linux - General 3 11-15-2003 03:08 AM


All times are GMT -5. The time now is 01:33 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration