Date: Fri, 13 Sep 2002 17:30:01 +1000 From: Tony Landells <ahl@austclear.com.au> To: fred <fred@timogen.com> Cc: freebsd-questions@FreeBSD.ORG Subject: Re: Privilege for user groups Message-ID: <200209130730.RAA17771@tungsten.austclear.com.au>
next in thread | raw e-mail | index | archive | help
On Thu, Sep 12, 2002 at 10:49:19PM -0700, fred typed: > Hi, > > I have create two usergroups in my freebsd box dev > and qa. > I also have a folder /home/samba/test. > > I want to grant the r_x privilege on > folder /home/samba/test to qa group while grant the > rwx privilege to dev group? > > How do i implement it in the freebsd box? Well, you can chgrp /home/samba/test to dev, then chmod it to 775 which means you (the owner) will have rwx, dev (the group) will have rwx, and qa (and anyone else not you and not in group dev) will get r-x. Is that close enough? If you want to have it so dev get rwx, qa get r-x, and people in neither of those two groups have totally different permissions then life will be kind of difficult, though you might be able to hack something through Samba using multiple share names that point to the same directory, for example: [devtest] comment = dev test directory path = /home/samba/test writable = yes valid users = @dev force group = dev [qatest] comment = qa access to test directory path = /home/samba/test writable = no valid users = @qa force group = dev and then chgrp the directory to dev, and chmod it to 77X where 'X' is whatever permission you want people not in dev or qa to get. The trickery here is that the people in group qa use the second share, which looks like it's operating as group dev, but has write permission disabled on the share. It should work... Tony -- Tony Landells <ahl@austclear.com.au> Principal Networks, Security & IT Systems Engineer Ph: +61 3 9677 9319 Australian Clearing Services Pty Ltd Fax: +61 3 9677 9355 Level 4, Rialto North Tower 525 Collins Street Melbourne VIC 3000 Australia To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200209130730.RAA17771>