Hi,

I don't know if I can do this with linux.

We are a school and we share a samba folder with students and teacher groups. What we are trying to do is:
- Give students group users the permissions to rwx own files in folder
- Students must not be able to do anything with others files. I mean nothing so, at most, they could see the files in folder but not read it.
- Teachers can do anything with files in folder (this is the easy part :-))

As you can imagine, the idea is that students deliver their exams in that folder without the ability to read/copy the other students files.

With sticky bit we can restrict students permissions to their own files, that is ok, but how to restrict all the permissions on other students files without restricting student access to that folder?

Thanks in advance!

It may take some tweaking but I am sure this can be accomplished. I think the solution will require a combination of Samba security and linux file permissions. Each student will need their own directory, which you have. The permissions should have owner RWX permissions, but 'others' should not even have read capability. Using proper authentication in Samba, each student should then be restricted to their own directory. What I am not sure about is if each directory will need it own Samba configuration or if you can create a single share and make these sub directories. I think that should work, but you will need to confirm.

As far as the teachers go, I can think of two ways to approach this. First, as the 'root' user will have access to the files regardless of the permission, the teachers could either use sudo or become root and perform their actions. Do not give this capability to the students. Second, you could create a group for the teachers and assign file and directory permissions for that group.

It wasn't clear from your post what you had tried and what result you achieved. That information may be helpful in fine tuning a solution for you.