Permissions - Revision history

Support at 11:48, 12 May 2020

2020-05-12T11:48:27Z

2020-05-12T11:46:17Z

2020-05-12T11:34:28Z

2020-05-12T11:16:39Z

2020-05-12T11:04:07Z

2020-05-11T21:38:30Z

2020-05-11T21:37:43Z

2020-05-11T21:35:36Z

2020-05-11T21:26:45Z

2020-05-11T21:21:11Z

@@ Line 50: / Line 50: @@
   OR if you have many users
   # for U in buildapp1 buildapp2 ; do find /home/$U -type f -exec chmod g+w '{}' ; ; done
@@ Line 79: / Line 78: @@
-Reference
+=== Reference ===
 ls output
@@ Line 110: / Line 109: @@
     default:mask::r-x
     default:other::---

@@ Line 134: / Line 134: @@
   Options (some)
-   -c, --changes          like verbose but report only when a change is made
+   -c like verbose but report only when a change is made
-   -R, --recursive        change files and directories recursively
+   -R change files and directories recursively
@@ Line 141: / Line 141: @@
   Options (some)

@@ Line 82: / Line 82: @@
 ls output
 Note: the + means some ACL's have been set
@@ Line 131: / Line 132: @@
   's' set user or group ID on execution
   't' restricted deletion flag or sticky bit

@@ Line 1: / Line 1: @@
 ===  Basic perms ===
-Depending on scripts/processes being run, some only need to read files (read-only), but some need read/write access, to the alternate account
+Depending on scripts/processes being run, some only need to read files (read-only), but some need read/write access, to the alternate account (or an application account)
 Limitations/Issues
@@ Line 8: / Line 8: @@
-Multiple users/processes needing access to a single account
+Multiple users/processes needing access to a single account (or an application account)
 . Add users to proper group
@@ Line 82: / Line 82: @@
 ls output
-  # ls -l
+ # ls -ld somedir

@@ Line 4: / Line 4: @@
 Limitations/Issues
-* additional app/process users will all be set to either all read/write access or all read-only access, if both are needed, ACL's must be used (like in some samba env's)           * umask may need to be modified where multiple processes are creating files/directories (i.e.; umask settings for both files and directories in samba, umask settings in ftp server configuration, etc.)
+* additional app/process users will all be set to either all read/write access or all read-only access, if both are needed, ACL's must be used (like in some samba env's)
@@ Line 57: / Line 58: @@
 * umask may need to be modified where multiple processes are creating files/directories (i.e.; umask settings for both files and directories in samba, umask settings in ftp server configuration, etc.)
-Note: m - modify, R - recursive, d - default perms (for new files, as opposed to no -d which would be existing files)
+Note: m - modify, R - recursive, d - default perms (for new files, as opposed to leaving out the -d, which would be existing files)

← Older revision		Revision as of 21:35, 11 May 2020
Line 85:		Line 85:
	getfacl output		getfacl output

−	# getfacl	+	# getfacl somedir
		+	# file: somedir/
		+	# owner: lisa
		+	# group: staff
		+	# flags: -s-
		+	user::rwx
		+	user:joe:rwx #effective:r-x
		+	group::rwx #effective:r-x
		+	group:cool:r-x
		+	mask::r-x
		+	other::r-x
		+	default:user::rwx
		+	default:user:joe:rwx #effective:r-x
		+	default:group::r-x
		+	default:mask::r-x
		+	default:other::---
		+
		+

← Older revision		Revision as of 21:26, 11 May 2020
Line 56:		Line 56:
	* umask may need to be modified where multiple processes are creating files/directories (i.e.; umask settings for both files and directories in samba, umask settings in ftp server configuration, etc.)		* umask may need to be modified where multiple processes are creating files/directories (i.e.; umask settings for both files and directories in samba, umask settings in ftp server configuration, etc.)

		+	Note: m - modify, R - recursive, d - default perms (for new files, as opposed to no -d which would be existing files)

	For a directory tree;		For a directory tree;

@@ Line 20: / Line 20: @@
   read/write
   # find /home/appuser -type d -exec chmod g=rwxs '{}' ;
 . Optionally set write access, for read/write option
@@ Line 34: / Line 33: @@
   OR if you have many users
   # for U in buildapp1 buildapp2 ; do usermod -aG $U scmadmins ; done
 . Set directory perms so that new files all belong to the same group
@@ Line 65: / Line 63: @@
   # setfacl -Rm u:joe:rw /home/Shared/Reports
   # setfacl -dRm u:joe:rw /home/Shared/Reports
 Read-Only users;