Latest LQ Deal: Latest LQ Deals
Go Back > Forums > Linux Forums > Linux - Security
User Name
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.


  Search this Thread
Old 07-09-2010, 08:35 AM   #1
LQ Newbie
Registered: Jul 2010
Posts: 22

Rep: Reputation: 0
filesystem permissions question - making so user can't change permissions?


I need to allow users to read, create and modify files and subdirectories but I don't want them to be able to modify the owner or permissions, can this be done with filesystem permissions? Using CentOS 5.5.
Old 07-09-2010, 10:56 AM   #2
LQ Newbie
Registered: Nov 2009
Posts: 14

Rep: Reputation: 2
I don't think there is a way to do this with the standard Unix permissions. If you can write to a file, you can change permissions.

However, if you have time on your hands and can learn to use SELinux, there should be a way to do it there.
1 members found this post helpful.
Old 07-09-2010, 02:21 PM   #3
Senior Member
Registered: Nov 2004
Location: Texas
Distribution: RHEL, Scientific Linux, Debian, Fedora
Posts: 3,935
Blog Entries: 5

Rep: Reputation: Disabled
You can get close to the desired effect with shared group membership, and then group ownership (with the sgid bit on directories) for the files.

The problem is: when a user creates a new file s/he will be the owner.

Selinux is one idea for solving that problem. Another is removing read/execute permissions from /bin/chmod and /bin/chown for everyone but root. (That may have some other unintended consequences, though.)
1 members found this post helpful.
Old 07-12-2010, 07:51 AM   #4
LQ Newbie
Registered: Jul 2010
Posts: 22

Original Poster
Rep: Reputation: 0
ok, thanks for the info, it's appreciated.
Old 07-12-2010, 09:06 AM   #5
LQ Newbie
Registered: Jul 2010
Posts: 22

Original Poster
Rep: Reputation: 0
marking thread as solved, since my real question was can this be done with the standard file permissions, and I got the answer, it can not. But thanks for the possible alternatives, I appreciate it.


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
How do I recreate a linux user w/o impacting existing filesystem/permissions/shell..? linuxeth123 Linux - Newbie 1 06-01-2010 12:54 PM
Change Permissions For Read-Only Filesystem rc nai Slackware 2 06-21-2008 05:20 PM
How do I change permissions for a folder on an NTFS filesystem? arthur42dent Linux - Security 3 02-15-2008 08:14 PM
Change my user to root permissions metalaid Linux - Newbie 5 01-19-2004 08:17 PM
How to change permissions for Mounted Filesystem leroy27336 Linux - General 3 11-15-2003 03:08 AM > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 11:29 PM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration