LinuxQuestions.org
Did you know LQ has a Linux Hardware Compatibility List?
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices

Reply
 
Search this Thread
Old 06-14-2012, 09:24 AM   #1
Ronayn
Member
 
Registered: Jan 2006
Posts: 55

Rep: Reputation: 0
Setting developer verser operator permissions


As a developer, Iíve created software that falls under the following directory tree:

Launcher
|--- Apps
| |--- Bin
| |--- Src
|--- Images
|--- Scripts
|--- launch.sh

I want to set the permissions of Launcher and its subdirectories such that only I, or someone in my group, can manipulate them. (I know how to do this.)

As an operator, I need to be able to execute launch.sh, and to copy executables from the Bin subdirectory to a local directory for execution. How do I accomplish this while still keeping Launcher and its subdirectories locked down?

I am trying to think the problem out, and basically what I want is for the operator to be able to run a script that he cannot read/modify. This script has the permission necessary to execute lauch.sh, perform the copies (, and set file permission so that operator can use those files). Is this possible?

FYI: Currently this software is setup so that operator is the owner, but Iíd really like to separate the developer from the operator (as an operator should never be tinkering with the source code or scripts).
 
Old 06-14-2012, 08:03 PM   #2
chrism01
Guru
 
Registered: Aug 2004
Location: Sydney
Distribution: Centos 6.5, Centos 5.10
Posts: 16,261

Rep: Reputation: 2028Reputation: 2028Reputation: 2028Reputation: 2028Reputation: 2028Reputation: 2028Reputation: 2028Reputation: 2028Reputation: 2028Reputation: 2028Reputation: 2028
1. if you really mean a script (eg bash, Perl etc) then it must be readable to be executed; ie must have at least r-x somewhere.
You would have to compile a binary (eg using C) to avoid the r perm and have it run only with x perms.

2.
a) you could go with rwxrwxr-x owned by you:you, but that of course means anyone can read/run.

b) You could go with rwxr-x--- owned by you:somegrp & add operator to somegroup, but only you would be able to edit it.

c) Lastly, you could use ACLs eg http://linuxcommando.blogspot.com.au...-lets-you.html http://linux.die.net/man/1/setfacl http://linux.die.net/man/1/getfacl
 
  


Reply

Tags
permissions, scripting


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] Setting up basic lamp server with CentOS 6, opinions for developer access? jraz Linux - Server 4 11-27-2011 07:42 AM
[SOLVED] C++ Operator Overloading Within an Already Overloaded Operator mirlin510 Programming 8 04-17-2011 12:02 PM
setting permissions kalidoss Linux - Newbie 1 06-28-2010 08:37 PM
setting permissions Raakh Linux - Newbie 12 01-01-2008 10:19 AM
Setting Permissions johnnyde Linux - Newbie 1 05-22-2003 04:37 PM


All times are GMT -5. The time now is 12:29 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration