Linux - SecurityThis forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.
Notices
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
There is a bunch of directories and files that I have set ACL's too so that users can create, delete, modify files or simply just read them. However if they create a new file, the default ownership of the file by just doing ls -l is there username and default group. I want the default owner of the file to be root so that they cannot chmod 777 on that file. They will still have access to it because of the acls, i just don't want them giving access to everyone
Yeah, if a user has write access to a file then they can change the permissions (but not the ownership). It'd be better if you stated the problem you're trying to solve as I think you're looking at this the wrong way. If you have a group of users who work on a set of files that you don't want anyone else to have access to then put those users in a group, set the group ownership on those files to that group and finally set the setgid bit (chmod g+s).
There is no way to stop your users deliberately giving access to others to files that they can access. If they can write to the files they can change the permissions, if they can read them they can copy them to another part of the filesystem, a network drive, a USB drive etc. If you can't trust your users with important files don't give them access to them.
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.