Re: Group rights
On Mon, 2003-09-15 at 22:12, Joyce, Matthew wrote:
> Dear Debain Users,
>
> I'm a little confused regarding the use of group to assign file rights.
>
> I was under the impression that user can be members of groups and groups can
> be used to assign permissions to files and folders.
>
> How then, do I assign multiple groups, different permission to the same
> folders and do those permissions cascade downwards ?
> If they do, how do you stop them ?
Unix does not traditionally support this sort of thing and (somewhat
surprisingly to me) I have found that it is really not all that
necessary most of the time. However, if you do find it necessary, there
a number of good options, all of which involve ACLs.
If you use ext2/ext3, you can use the ACL patch for ext2/3 file systems,
or you can use XFS which supports ACLs out-of-the-box.
Posix ACLs are a bit different than either Windows' or Netware's
permissions/trustee systems. They allow you to do two things, Set (unix)
permissions for multiple users/groups, and set default permissions for
multiple users/groups. Check out the manpages for getfacl and setfacl
for more info.
For situations where you need them, they work quite well, most of the
time though, the group sticky bit on directories, and a special
task-oriented group does the job Good Enough
-Mark
Reply to: