[vox-tech] samba permissions issue

[Ryan]

ah, the sticky bit... you solved all my problems, I was thinking the sticky
directory was the default behavior.
thanx!



----- Original Message -----
From: <msimons@moria.simons-clan.com>
To: <vox-tech@lists.lugod.org>
Sent: Wednesday, February 19, 2003 11:21 PM
Subject: Re: [vox-tech] samba permissions issue


> On Wed, Feb 19, 2003 at 07:36:51PM -0800, Jeff Newmiller wrote:
> > On Wed, 19 Feb 2003, Ryan wrote:
> > > I have a public upload directory set up with permissions 775, where I
> > > want want people in my 'users' group to be able to upload files.
> > >
> > > Files that are uploaded are given permissions 755.
> > > network neighborhood (winbloze), non-owners of a file that are logged in
> > > over the network, but still belonging to the 'users' group, can
> > > delete any of the files in the directory. I don't know why this is.
> >
> > Permission to delete files derives from the write permissions on the
> > directory from which the file is to be deleted.  The set of people
> > authorized to create files in a directory is equal to the set of people
> > authorized to delete or rename files in that directory.
>
>   Jeff is correct, with a minor modification.  If the directory low special
> bit (aka sticky bit) is set only owners of the file may delete the file.
>   1xxx.  like 1775 or 1777.
> this is how the /tmp dir is setup... you should try this and see if the
> windows users still have permission to nuke files.
>
> from chmod (1) man page.
> ===
> STICKY DIRECTORIES
>        When the sticky bit is set on a directory, files  in  that
>        directory may only be unlinked or renamed by root or their
>        owner.  (Without the sticky bit, anyone able to  write  to
>        the  directory can delete or rename files.) The sticky bit
>        is commonly found on directories, such as /tmp, which  are
>        world-writable.
> ===
> _______________________________________________
> vox-tech mailing list
> vox-tech@lists.lugod.org
> http://lists.lugod.org/mailman/listinfo/vox-tech
>