Sent from my iPhone

On Aug 14, 2008, at 12:50 PM, "Gregory K. Ruiz-Ade" <[EMAIL PROTECTED]> wrote:

I have a server (CentOS 5 Update 2) sharing a filesystem via nfs:

---- /etc/exports ----
/data clienthost(rw,sync,root_squash)
----

and a client (RHEL 4 Update 6) mounting it:

---- /etc/fstab ----
//server/data /data nfs rsize=8192,wsize=8192,hard,intr
----

Creating a directory on the share:

# mkdir /data/testdir
# chown usera:groupx /data/testdir
# chmod 2775 /data/testdir


# chmod 2770 /data/testdir

5 is read / write for others

seems to work fine, and the directory looks fine from both server and client. Right permissions, right ownerships, so far so good.

Except, a different user (userb) NOT in the same group can still do whatever he/she wants in that directory, completely counter to what unix permissions claim should be possible.

Both systems get user/group information via LDAP, so uids/gids are consistent across machines.

This is a head-scratcher for me. WHY is a user who should have no permissions able to create/modify/delete files in this directory?

Gregory

--
Gregory K. Ruiz-Ade <[EMAIL PROTECTED]>
OpenPGP Key ID: EAF4844B  keyserver: pgpkeys.mit.edu




--
[email protected]
http://www.kernel-panic.org/cgi-bin/mailman/listinfo/kplug-list


--
[email protected]
http://www.kernel-panic.org/cgi-bin/mailman/listinfo/kplug-list

Reply via email to