From owner-freebsd-questions@FreeBSD.ORG  Tue Mar 30 09:27:54 2004
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 12A4216A4CE
	for <questions@freebsd.org>; Tue, 30 Mar 2004 09:27:54 -0800 (PST)
Received: from archangel.daleco.biz (unknown [69.27.131.0])
	by mx1.FreeBSD.org (Postfix) with ESMTP id C2EC643D1F
	for <questions@freebsd.org>; Tue, 30 Mar 2004 09:27:52 -0800 (PST)
	(envelope-from www@archangel.daleco.biz)
Received: from localhost (localhost [127.0.0.1])i2UHQYhU050689;
	Tue, 30 Mar 2004 11:26:34 -0600 (CST)
	(envelope-from www@archangel.daleco.biz)
Received: from archangel.daleco.biz ([127.0.0.1])
 by localhost (archangel.daleco.biz [127.0.0.1]) (amavisd-new, port 10024)
 with LMTP id 50257-09; Tue, 30 Mar 2004 11:26:32 -0600 (CST)
Received: from archangel.daleco.biz (localhost [127.0.0.1])
	i2UHQT2p050684;	Tue, 30 Mar 2004 11:26:30 -0600 (CST)
	(envelope-from www@archangel.daleco.biz)
Received: (from www@localhost)
	by archangel.daleco.biz (8.12.10/8.12.9/Submit) id i2UHQTd3050683;
	Tue, 30 Mar 2004 11:26:29 -0600 (CST)
	(envelope-from www)
Date: Tue, 30 Mar 2004 11:26:29 -0600 (CST)
Message-Id: <200403301726.i2UHQTd3050683@archangel.daleco.biz>
To: lag@ipwatchers.net
From: jim@southernuniform.com
X-Virus-Scanned: by amavisd-new at archangel.daleco.biz
cc: questions@freebsd.org
Subject: Re: Re: Security related questions
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 30 Mar 2004 17:27:54 -0000

> could anyone explain some examples of setting up a restricted group for
> limiting users?  using chmod and chown.. i\'ve had a little luck, but not
> overall.

Is this what you\'re asking for?

   #echo \"jamesgroup:*:5000:james,me\" >> /etc/group
   #touch /home/me/james-file
   #chgrp jamesgroup /home/me/james-file
   #chmod 770 /home/me/james-file

Note that \"5000\" was an arbitrary choice.  At the
very least, it should be a gid that isn\'t already
present ;-)

If you\'ve never played with /etc/group before, be
sure you have a backup copy before you start ...


Kevin Kinsey
DaleCo, S.P.