Re: Append only directory ? Is this possible with unix permissions ?

2007-04-11 Thread perryh
Gore Jarold [EMAIL PROTECTED] wrote:

 I have a user whose home directory I would like to
 make append only.
 ...

As someone else suggested, ACLs are likely the strongest way of
handling this.

On the other hand, if all that is needed is a way to make it a
little tougher for said user to shoot him/herself in the foot,
set noclobber in csh or tcsh might help.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Append only directory ? Is this possible with unix permissions ?

2007-04-10 Thread Gore Jarold
Hello,

I have a user whose home directory I would like to
make append only.

That is to say, they cannot delete files, or delete
information from files, but they _can_ create new
files or append information to existing files.

Or, if that is not possible, at the very least I
wouldlike the ability to create new files, while not
being allowed to delete any files.

Is this possible with unix permissions ?  Is it
possible in the freebsd filesystem in any way at all ?

If not, any suggestions ?


   

Expecting? Get great news right away with email Auto-Check. 
Try the Yahoo! Mail Beta.
http://advision.webevents.yahoo.com/mailbeta/newmail_tools.html 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Append only directory ? Is this possible with unix permissions ?

2007-04-10 Thread Pietro Cerutti

On 4/10/07, Gore Jarold [EMAIL PROTECTED] wrote:

Hello,

Hi,


I have a user whose home directory I would like to
make append only.

man chmod(2), look for sticky...

--
Pietro Cerutti

- ASCII Ribbon Campaign -
against HTML e-mail and
proprietary attachments
  www.asciiribbon.org
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Append only directory ? Is this possible with unix permissions ?

2007-04-10 Thread Parv
in message [EMAIL PROTECTED],
wrote Gore Jarold thusly...

 I have a user whose home directory I would like to make append
 only.

See chflags(1), getfacl(1), and setfacl(1).


 That is to say, they cannot delete files, or delete information
 from files, but they _can_ create new files or append information
 to existing files.

If you set sappnd flag (via chflags) on a directory, then nobody
will be able to delete any pre-existing files (or files created
later) in that directory.  However, any file in that directory can
still be truncated to size of 0.

If set the same flag on a file, then that particular file cannot be
deleted or truncated, only be appeneded.

So you may need to set the sappnd flag at least on each file.


 Or, if that is not possible, at the very least I wouldlike the
 ability to create new files, while not being allowed to delete any
 files.

 Is this possible with unix permissions ?  Is it possible in the
 freebsd filesystem in any way at all ?

The sticky bit, as mentioned in other reply, will limit file
modifications, including deletion, to the owner of the file.


In case like this ACLs seem to be most appropriate.  FreeBSD 5.0
included a complete ACL implementation based on extended attributes
for the UFS and UFS2 file systems.  See also acl(9) which lists the
appropriate kernel option (UFS_ACL).


  - Parv

-- 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]