Re: Allow all access to database files (dumb newbie question)

2002-12-06 Thread Brad De Vries
Has anyone suggested taking advantage of the security
within Linux/UNIX?

Why not:
1) create a group for the project
2) add users to the group who need access to this
project
3) create a directory such as /opt/project or
/home/project or /home/projects/project
4) assign the permissions for this directory so that
only the group from #1 can read/write/etc.
5) move all project related files into the directory
and adjust permissions as appropriate
6) verify that the newly created directory(ies) are
being backed up as desired
7) celebrate that the issue is:
   a) resolved
   b) secure
   c) easily maintainable
   d) proof of concept for other projects

Once you've done a few of these types of little
projects, you start to see the benefits/drawbacks of
where you put things.  Then, hopefully, you can move
the directories and simply create symlinks.

Brad.
--- Robert Black Eagle <[EMAIL PROTECTED]> wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
> 
> If you mean /tmp, you're mistaken.  All sorts of
> programs use it and it 
> isn't used for anything except temporary files.
> 
> On Wednesday 04 December 2002 6:36 pm, Bill Day
> wrote:
> > /temp is uually world read/writeable.. but not a
> good idea..  maybe a
> > samba share where only system users are allowed
> read/write access
> >
> > Bill Day
> >
> > Linux 2.2.20-1tr i586
> >   6:10pm  up 1 day,  9:11,  0 users,  load
> average: 0.00, 0.00, 0.00
> > We're still up at irc.openprojects.net @
> #linux-users
> > or irc.freenode.net @ #linux-users
> > http://counter.li.org #83358
> > http://sxs.daysdomain.com/
> >
> > - Original Message -----
> > From: "Harry G" <[EMAIL PROTECTED]>
> > To: "SxS Users" <[EMAIL PROTECTED]>
> > Sent: Wednesday, December 04, 2002 5:20 PM
> > Subject: Allow all access to database files (dumb
> newbie question)
> >
> > > I am running database program as a user. I have
> another user on the
> > > same computer I want to give access to the
> database file, and also
> > > a bunch of documents.
> > >
> > > Where is the best place to put this in the
> filesystem?  I see a lot
> > > of
> >
> > places
> >
> > > that might work, but I want to do this properly.
>  Both users will
> > > need
> >
> > read
> >
> > > and write access, by the way.
> > >
> > > TIA
> > >
> > > Harry G
> >
> > ---
> > Outgoing mail is certified Virus Free.
> > Checked by AVG anti-virus system
> (http://www.grisoft.com).
> > Version: 6.0.423 / Virus Database: 238 - Release
> Date: 11/25/02
> 
> - -- 
> Robert Black Eagle
> One gets wise only after being stupid.



__
Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
http://mailplus.yahoo.com
___
Linux-users mailing list
[EMAIL PROTECTED]
Unsubscribe/Suspend/Etc -> http://www.linux-sxs.org/mailman/listinfo/linux-users



Re: Allow all access to database files (dumb newbie question)

2002-12-06 Thread Robert Black Eagle
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

If you mean /tmp, you're mistaken.  All sorts of programs use it and it 
isn't used for anything except temporary files.

On Wednesday 04 December 2002 6:36 pm, Bill Day wrote:
> /temp is uually world read/writeable.. but not a good idea..  maybe a
> samba share where only system users are allowed read/write access
>
> Bill Day
>
> Linux 2.2.20-1tr i586
>   6:10pm  up 1 day,  9:11,  0 users,  load average: 0.00, 0.00, 0.00
> We're still up at irc.openprojects.net @ #linux-users
> or irc.freenode.net @ #linux-users
> http://counter.li.org #83358
> http://sxs.daysdomain.com/
>
> - Original Message -
> From: "Harry G" <[EMAIL PROTECTED]>
> To: "SxS Users" <[EMAIL PROTECTED]>
> Sent: Wednesday, December 04, 2002 5:20 PM
> Subject: Allow all access to database files (dumb newbie question)
>
> > I am running database program as a user. I have another user on the
> > same computer I want to give access to the database file, and also
> > a bunch of documents.
> >
> > Where is the best place to put this in the filesystem?  I see a lot
> > of
>
> places
>
> > that might work, but I want to do this properly.  Both users will
> > need
>
> read
>
> > and write access, by the way.
> >
> > TIA
> >
> > Harry G
> >
> > ___
> > Linux-users mailing list
> > [EMAIL PROTECTED]
> > Unsubscribe/Suspend/Etc ->
>
> http://www.linux-sxs.org/mailman/listinfo/linux-users
>
>
> ---
> Outgoing mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.423 / Virus Database: 238 - Release Date: 11/25/02
>
> ___
> Linux-users mailing list
> [EMAIL PROTECTED]
> Unsubscribe/Suspend/Etc ->
> http://www.linux-sxs.org/mailman/listinfo/linux-users

- -- 
Robert Black Eagle  
One gets wise only after being stupid.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE98Nq4tjSYKkYJrmcRAk8pAJ4gk2A7bM/gn1q1Pc7vOfSKLKb6xQCgiSUd
AFd0ioGCLDH8bpy/LwxrzwA=
=GHNh
-END PGP SIGNATURE-
___
Linux-users mailing list
[EMAIL PROTECTED]
Unsubscribe/Suspend/Etc -> http://www.linux-sxs.org/mailman/listinfo/linux-users



Re: Allow all access to database files (dumb newbie question)

2002-12-05 Thread David A. Bandel
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Wed, 4 Dec 2002 17:01:51 -0500
begin  Harry G <[EMAIL PROTECTED]> spewed forth:

> I am running ACT! software via Crossovers Wine package rather
> successfully.  I have another user on the same computer I want to give
> access to the database file, and also a bunch of documents.
> 
> Where is the best place to put this in the filesystem?  I see a lot of
> places that might work, but I want to do this properly.  Both users will
> need read and write access, by the way.
> 
> Thank you, oh great teachers!


There are several interpretations of where might be "right".  I favor
/var/lib/ or /var/local/ because /var is
designed to be the mount for things that "grow" -- logs, dhcp.leases, etc.
 I'm pretty sure this is the FHS way as well.

Ciao,

David A. Bandel
- -- 
Focus on the dream, not the competition.
-- Nemesis Racing Team motto
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQE97ziG3uVcotqGMQcRAmA6AKDRrfEDUnioTK+FgiN1o/a038j3OACff2Tn
wUeBlyKJprsG1fHU53lRxEM=
=YGFv
-END PGP SIGNATURE-
___
Linux-users mailing list
[EMAIL PROTECTED]
Unsubscribe/Suspend/Etc -> http://www.linux-sxs.org/mailman/listinfo/linux-users



Re: Allow all access to database files (dumb newbie question)

2002-12-04 Thread kwall
On Wed, Dec 04, 2002 at 05:01:51PM -0500, Harry G wrote:
> I am running ACT! software via Crossovers Wine package rather successfully.  I 
> have another user on the same computer I want to give access to the database 
> file, and also a bunch of documents.
> 
> Where is the best place to put this in the filesystem?  I see a lot of places 
> that might work, but I want to do this properly.  Both users will need read 
> and write access, by the way.

If you want to adhere to the FHS, my interpretation of that tome
says /opt is the right place. Judge for yourself, however:

http://www.pathname.com/fhs/2.2/

Kurt
-- 
Mad, adj.:
Affected with a high degree of intellectual independence ...
-- Ambrose Bierce, "The Devil's Dictionary"
___
Linux-users mailing list
[EMAIL PROTECTED]
Unsubscribe/Suspend/Etc -> http://www.linux-sxs.org/mailman/listinfo/linux-users



Re: Allow all access to database files (dumb newbie question)

2002-12-04 Thread Ted Ozolins
On Wednesday 04 December 2002 16:36, Bill Day wrote:
> /temp is uually world read/writeable.. but not a good idea..  maybe a samba
> share where only system users are allowed read/write access
>
I kind of like /home/public to share files with other users and /home/common 
to house joint projects but then I'm known for doing things a little dif

-- 
Ted Ozolins (VE7TVO)
Westbank, B. C.
Powered by Slackware 8.1 sent with Kmail 1.4.3

___
Linux-users mailing list
[EMAIL PROTECTED]
Unsubscribe/Suspend/Etc -> http://www.linux-sxs.org/mailman/listinfo/linux-users



Re: Allow all access to database files (dumb newbie question)

2002-12-04 Thread Tim Wunder
On Wednesday 04 December 2002 06:20 pm, someone claiming to be Harry G wrote:
> I am running database program as a user. I have another user on the same
> computer I want to give access to the database file, and also a bunch of
> documents.
>
> Where is the best place to put this in the filesystem?  I see a lot of
> places that might work, but I want to do this properly.  Both users will
> need read and write access, by the way.
>

Wherever you want, it's your system.
I'd put it under /home, something like /home/shared, or whatever you want to 
call it.
You could even give it its own partition and mount it on /home/shared, or just 
/shared or wherever.

I wouldn't put it under /usr, or /tmp, or /var, though, but that's just me...

HTH, 
Tim


-- 
RedHat Psyche 8.0, stock kernel, Gnome 2.x, Xfree86 4.2.0
  7:00pm  up 2 days, 18:50,  2 users,  load average: 0.00, 0.00, 0.00
It's what you learn AFTER you know it all that counts
___
Linux-users mailing list
[EMAIL PROTECTED]
Unsubscribe/Suspend/Etc -> http://www.linux-sxs.org/mailman/listinfo/linux-users



Re: Allow all access to database files (dumb newbie question)

2002-12-04 Thread Bill Day
/temp is uually world read/writeable.. but not a good idea..  maybe a samba
share where only system users are allowed read/write access

Bill Day

Linux 2.2.20-1tr i586
  6:10pm  up 1 day,  9:11,  0 users,  load average: 0.00, 0.00, 0.00
We're still up at irc.openprojects.net @ #linux-users
or irc.freenode.net @ #linux-users
http://counter.li.org #83358
http://sxs.daysdomain.com/

- Original Message -
From: "Harry G" <[EMAIL PROTECTED]>
To: "SxS Users" <[EMAIL PROTECTED]>
Sent: Wednesday, December 04, 2002 5:20 PM
Subject: Allow all access to database files (dumb newbie question)


> I am running database program as a user. I have another user on the same
> computer I want to give access to the database file, and also a bunch of
> documents.
>
> Where is the best place to put this in the filesystem?  I see a lot of
places
> that might work, but I want to do this properly.  Both users will need
read
> and write access, by the way.
>
> TIA
>
> Harry G
>
> ___
> Linux-users mailing list
> [EMAIL PROTECTED]
> Unsubscribe/Suspend/Etc ->
http://www.linux-sxs.org/mailman/listinfo/linux-users


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.423 / Virus Database: 238 - Release Date: 11/25/02

___
Linux-users mailing list
[EMAIL PROTECTED]
Unsubscribe/Suspend/Etc -> http://www.linux-sxs.org/mailman/listinfo/linux-users



Allow all access to database files (dumb newbie question)

2002-12-04 Thread Harry G
I am running ACT! software via Crossovers Wine package rather successfully.  I 
have another user on the same computer I want to give access to the database 
file, and also a bunch of documents.

Where is the best place to put this in the filesystem?  I see a lot of places 
that might work, but I want to do this properly.  Both users will need read 
and write access, by the way.

Thank you, oh great teachers!

Harry G

___
Linux-users mailing list
[EMAIL PROTECTED]
Unsubscribe/Suspend/Etc -> http://www.linux-sxs.org/mailman/listinfo/linux-users