From owner-freebsd-questions@FreeBSD.ORG Tue Sep 14 18:05:05 2010 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 03D0D106566C for ; Tue, 14 Sep 2010 18:05:04 +0000 (UTC) (envelope-from cswiger@mac.com) Received: from asmtpout027.mac.com (asmtpout027.mac.com [17.148.16.102]) by mx1.freebsd.org (Postfix) with ESMTP id D9CD58FC08 for ; Tue, 14 Sep 2010 18:05:04 +0000 (UTC) MIME-version: 1.0 Content-transfer-encoding: 7BIT Content-type: text/plain; charset=us-ascii Received: from cswiger1.apple.com ([17.209.4.71]) by asmtp027.mac.com (Sun Java(tm) System Messaging Server 6.3-8.01 (built Dec 16 2008; 32bit)) with ESMTPSA id <0L8R006B60WAS990@asmtp027.mac.com> for freebsd-questions@freebsd.org; Tue, 14 Sep 2010 11:04:59 -0700 (PDT) X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 spamscore=0 ipscore=0 phishscore=0 bulkscore=0 adultscore=0 classifier=spam adjust=0 reason=mlx engine=6.0.2-1004200000 definitions=main-1009140082 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:5.0.10011,1.0.148,0.0.0000 definitions=2010-09-14_12:2010-09-14, 2010-09-13, 1970-01-01 signatures=0 From: Chuck Swiger In-reply-to: <20100914200116.23a34732.freebsd@edvax.de> Date: Tue, 14 Sep 2010 11:04:58 -0700 Message-id: References: <20100914200116.23a34732.freebsd@edvax.de> To: Polytropon X-Mailer: Apple Mail (2.1081) Cc: doug@safeport.com, freebsd-questions@freebsd.org Subject: Re: unix permissions questions X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Sep 2010 18:05:05 -0000 On Sep 14, 2010, at 11:01 AM, Polytropon wrote: > On Tue, 14 Sep 2010 13:32:40 -0400 (EDT), doug@safeport.com wrote: >> I found several directories whose permissions where set to >> >> dr-s--S--T 2 user group 512 Feb 22 2010 .procmail/ >> >> All were .procmail which is what we set for procmail logging and supporting >> recipes. In reading 'man ls' it seems (to me) this might result from losing the >> execute bit on the directory. Is this correct? Been BSDing since 1995 and have >> not seen this set of permissions. Thanks for any insights. > > After a short read of "man ls": [ ... ] > Result: User can execute SUID, group cannot execute, others cannot search > or execute; sticky bit is set. Except that this is a directory, not a file.... :-) A bit of experimentation suggests that "chmod 7500 .procmail" are the permissions involved, which are silly. No group permissions enabled means setgid is meaningless, and I don't see any value for using the sticky bit here, either. Try using 0500, 0700, or maybe 4500/4700 instead. Regards, -- -Chuck