From owner-freebsd-questions@FreeBSD.ORG Tue Sep 14 18:16:22 2010 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id A0DF91065670 for ; Tue, 14 Sep 2010 18:16:22 +0000 (UTC) (envelope-from doug@safeport.com) Received: from oceanpt.safeport.com (oceanpt.safeport.com [65.122.17.3]) by mx1.freebsd.org (Postfix) with ESMTP id 5E7288FC15 for ; Tue, 14 Sep 2010 18:16:22 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by oceanpt.safeport.com (8.14.2/8.14.2) with ESMTP id o8EIGJ0u095615; Tue, 14 Sep 2010 14:16:19 -0400 (EDT) (envelope-from doug@safeport.com) Date: Tue, 14 Sep 2010 14:16:19 -0400 (EDT) From: doug@safeport.com To: Chuck Swiger In-Reply-To: Message-ID: References: <20100914200116.23a34732.freebsd@edvax.de> User-Agent: Alpine 2.00 (BSF 1167 2008-08-23) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.0 (oceanpt.safeport.com [127.0.0.1]); Tue, 14 Sep 2010 14:16:19 -0400 (EDT) Cc: Polytropon , freebsd-questions@freebsd.org Subject: Re: unix permissions questions X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Sep 2010 18:16:22 -0000 On Tue, 14 Sep 2010, Chuck Swiger wrote: > On Sep 14, 2010, at 11:01 AM, Polytropon wrote: >> On Tue, 14 Sep 2010 13:32:40 -0400 (EDT), doug@safeport.com wrote: >>> I found several directories whose permissions where set to >>> >>> dr-s--S--T 2 user group 512 Feb 22 2010 .procmail/ >>> >>> All were .procmail which is what we set for procmail logging and supporting >>> recipes. In reading 'man ls' it seems (to me) this might result from losing the >>> execute bit on the directory. Is this correct? Been BSDing since 1995 and have >>> not seen this set of permissions. Thanks for any insights. >> >> After a short read of "man ls": > [ ... ] >> Result: User can execute SUID, group cannot execute, others cannot search >> or execute; sticky bit is set. > > Except that this is a directory, not a file.... :-) > > A bit of experimentation suggests that "chmod 7500 .procmail" are the permissions involved, which are silly. No group permissions enabled means setgid is meaningless, and I don't see any value for using the sticky bit here, either. Try using 0500, 0700, or maybe 4500/4700 instead. thanks all - the context of this: the users involved do not know what the chmod command is much less its syntax and I did not do this. What I was going for was could this be a procmail bug or perhaps something more alarming (to me as a sysadmin). _____ Douglas Denault http://www.safeport.com doug@safeport.com Voice: 301-217-9220 Fax: 301-217-9277