Group permisions on a directory

ADxD_7 · 04-07-2008, 12:42 PM

I know this may be common knowledge to some but I have never ran into this situation before.

What I have are 2 seperate groups that wanted me to create another secondary group for just certain users to be in so those users and only those users could execute certain things. So I did that no problem.

The problem is that they want everything that is created in a certain directory to be owned by the secondary group. I think it has to do with the umask or setfacl but I do not know.

Thanks in advance for any help.

raskin · 04-07-2008, 01:11 PM

http://www.gnu.org/software/coreutil...uid-and-Setgid

ADxD_7 · 04-07-2008, 03:00 PM

Quote:

Originally Posted by raskin

http://www.gnu.org/software/coreutil...uid-and-Setgid

That works kinda, it sets the GID right everytime but sets the permissions on the directorys and files all funky even though I specify in the command to make it u=rwx,g=rwx,o=r it makes everything that is created in that directory look like -rwxr--r-- and I need it to be just like the other directory.

raskin · 04-07-2008, 03:03 PM

Hm, maybe now it is users' umask. But sometimes chaniging it in /etc/profile is enough.

ADxD_7 · 04-07-2008, 03:25 PM

Quote:

Originally Posted by raskin

Hm, maybe now it is users' umask. But sometimes chaniging it in /etc/profile is enough.

Let me expain even better because I think I made it sound too complicated - lets say I have this

# ls -ald SATEST

drwxrwxr-- user1 group2 /SATEST

Lets say most people are in group1, this directory I made group2 and I want every directory and file created in this to be owned by group2 and to have the same group permissions " rwx " is thier an easy(or not easy) way to do this?

Or even just having a certain umask apply only to this directory would work as well

raskin · 04-08-2008, 09:47 AM

Owner can override access permissions on file being created. And umask is per-process tree. So I doubt that you can actually create a directory with the properties you want. Maybe using some FUSE filesystem.. Or with a cron job to chmod the files.

jlliagre · 04-08-2008, 11:48 AM

I suspect this might be doable with ZFS NFSv4 ACLs and the propagate attribute flags.

ADxD_7 · 04-08-2008, 12:51 PM

Quote:

Originally Posted by jlliagre

I suspect this might be doable with ZFS NFSv4 ACLs and the propagate attribute flags.

I will see...but for now I will just have to find something because I was trying to just use ACLs and they are not doing the trick, because as I learned they do not work over the NFS version we use at the moment.

Thanks for the advice