CMOD all folders but not any files ?

LooieENG · 07-15-2009, 08:45 PM

Hey im trying to make a bash script to protect the files on my NAS . I would just do a chmod -R 555 / but that prevents me or anyone else from uploading any files .

Is there any way to just chmod all the folders on the NAS to 777 so that new files can be uploaded but the folders or files cant be deleted ?

Thanks

jhwilliams · 07-15-2009, 08:59 PM

I wanted to do something similar once upon a time. You could adapt this short script I wrote...

http://www.jamesonwilliams.com/chpwn

And set the "sticky bit" if you're going to 777. See man sticky.
Or maybe this too: http://www.linuxsa.org.au/pipermail/...er/049071.html

What you're describing sounds like /tmp.

However, I don't think this is the best approach.

i92guboj · 07-15-2009, 10:43 PM

Quote:

Originally Posted by LooieENG

Hey im trying to make a bash script to protect the files on my NAS . I would just do a chmod -R 555 / but that prevents me or anyone else from uploading any files .

Is there any way to just chmod all the folders on the NAS to 777 so that new files can be uploaded but the folders or files cant be deleted ?

Thanks

Use "find".

Code:

find /dir/to/ -type d | xargs chmod 777
find /dir/to/ -type d | xargs chmod u+x
find /dir/to/ -type d -exec chmod u+x '{}' \;

Just some examples. The first will chmod all the dirs to 777, the second and the third one are equivalent, they will chmod the directories adding +x for their owner only.

jhwilliams · 07-16-2009, 10:37 AM

Quote:

Originally Posted by i92guboj

Use "find".

Code:

find /dir/to/ -type d | xargs chmod 777
find /dir/to/ -type d | xargs chmod u+x
find /dir/to/ -type d -exec chmod u+x '{}' \;

Just some examples. The first will chmod all the dirs to 777, the second and the third one are equivalent, they will chmod the directories adding +x for their owner only.

This is a much more rationale way to do what that script I wrote does. It did seem like something a wheel would have already been invented for. :-) I should study the find man page one of these days and invest some time to committing things other than -i?name and -i?regex.