Group can read, write, but not delete

pbwalker · 10-14-2010, 03:09 PM

Hello. Long time reader, first time poster. I've got, what has become to me, a brain bender. It seems ACL's are the best way to go, but I am not 100% sure.

Each user should be able to create files and modify each others' files, but should not be able to delete any one elses files in a directory.

chmod -1777?
setfacl?

I'm lost...

Thank you

anomie · 10-14-2010, 06:19 PM

This is solved by using the sticky bit (+t) at the directory level. From chmod(1):

Code:

RESTRICTED DELETION FLAG OR STICKY BIT
       The  restricted  deletion  flag  or  sticky  bit is a single bit, whose
       interpretation depends on the file type.  For directories, it  prevents
       unprivileged  users  from  removing or renaming a file in the directory
       unless they  own  the  file  or  the  directory...

pbwalker · 10-15-2010, 09:35 AM

perfect! thanks so much anomie!