From owner-freebsd-questions@FreeBSD.ORG Tue Sep 14 18:17:39 2010 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 71DE9106566C for ; Tue, 14 Sep 2010 18:17:39 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from mx02.qsc.de (mx02.qsc.de [213.148.130.14]) by mx1.freebsd.org (Postfix) with ESMTP id 327458FC13 for ; Tue, 14 Sep 2010 18:17:38 +0000 (UTC) Received: from r55.edvax.de (port-92-195-157-147.dynamic.qsc.de [92.195.157.147]) by mx02.qsc.de (Postfix) with ESMTP id 3881C1ED33; Tue, 14 Sep 2010 20:17:38 +0200 (CEST) Received: from r55.edvax.de (localhost [127.0.0.1]) by r55.edvax.de (8.14.2/8.14.2) with SMTP id o8EIHbKL003795; Tue, 14 Sep 2010 20:17:37 +0200 (CEST) (envelope-from freebsd@edvax.de) Date: Tue, 14 Sep 2010 20:17:36 +0200 From: Polytropon To: Chuck Swiger Message-Id: <20100914201736.9519471e.freebsd@edvax.de> In-Reply-To: References: <20100914200116.23a34732.freebsd@edvax.de> Organization: EDVAX X-Mailer: Sylpheed 2.4.7 (GTK+ 2.12.1; i386-portbld-freebsd7.0) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Cc: freebsd-questions@freebsd.org Subject: Re: unix permissions questions X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Polytropon List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Sep 2010 18:17:39 -0000 On Tue, 14 Sep 2010 11:04:58 -0700, Chuck Swiger wrote: > On Sep 14, 2010, at 11:01 AM, Polytropon wrote: > > On Tue, 14 Sep 2010 13:32:40 -0400 (EDT), doug@safeport.com wrote: > >> I found several directories whose permissions where set to > >> > >> dr-s--S--T 2 user group 512 Feb 22 2010 .procmail/ > >> > >> All were .procmail which is what we set for procmail logging and supporting > >> recipes. In reading 'man ls' it seems (to me) this might result from losing the > >> execute bit on the directory. Is this correct? Been BSDing since 1995 and have > >> not seen this set of permissions. Thanks for any insights. > > > > After a short read of "man ls": > [ ... ] > > Result: User can execute SUID, group cannot execute, others cannot search > > or execute; sticky bit is set. > > Except that this is a directory, not a file.... :-) Thanks, I forgot to include that in my summary. :-) In this case, I wanted to say that the user can chdir / search that directory. > A bit of experimentation suggests that "chmod 7500 .procmail" are the > permissions involved, which are silly. No group permissions enabled > means setgid is meaningless, and I don't see any value for using the > sticky bit here, either. Try using 0500, 0700, or maybe 4500/4700 instead. I would think that's what the permissions should be - it roughly is equivalent to what a file with a similar purpose would look like for a (user's) private .procmail/ directory. -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ...