Hello All,

I need clarification with users and groups. Firstly, I get the permissions part with rwx options for ugo. I know how to apply them with chmod and understand how it affects files/folders.

What I need clarification on is how groups can be used to control access/permissions.

Here's an example:

I'm an administrator. I've created two new groups, group1 and group2. I want the users in group1 to be able to rwx any file that users in group2 create. However, the group2 users cannot _wx to any file group1 creates.

I know I can apply those permissions to individual files as they are created by either group. How can I assign those permissions to the group as a whole so that whenever a user creates a file, that file automatically inherits the permissions of the group?

Thanks!

There are a couple of options,

Option 1
Add group2 as a secondary group for all the group1 users:
Add group sticky bit to relevant directories:
.. this ensures that the group owning the directory will also be the owner of any files created in it, but group1 will have the same permissions as group2.

Option 2
Use setfacl to add permissions for group1 to the relevant directory
.. this will allow group1 to have different permissions than group2 to the same files

Ensure acl support is present for the file system:
... and look for user_xattr.

Please note that both of these options are based on file system permissions tied to specific directories.

Thank you, kbp!

I will allow my brain to digest what you've said!