Re: [opensuse] Re: Is it possible to set group permissions = owner permissions

2006-12-22 Thread Jan Engelhardt

On Dec 22 2006 08:33, Mike Noble wrote:
>
>Why not just edit the files by hand, it really is not that difficult, you only
>have /etc/group, /etc/passwd, /etc/shadow.  For large companies most
>of them are using NFS and NIS so this makes it really easy.

*cough* ldap *cough* nss_mysql *cough*

scnr ;-)


-`J'
-- 
-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse] Re: Is it possible to set group permissions = owner permissions

2006-12-22 Thread Mike Noble
Why not just edit the files by hand, it really is not that difficult, you only
have /etc/group, /etc/passwd, /etc/shadow.  For large companies most
of them are using NFS and NIS so this makes it really easy.

Mike

On Wednesday 20 December 2006 06:46, James Knott wrote:
> Joe Morris (NTM) wrote:
> > James Knott wrote:
> >> Martin Mielke wrote:
> >>> Hi,
> >>>
> >>> you can always issue a chmod 701 $HOME after your user has been
> >>> created...
> >>
> >> While that's easy enough to do on a home system, if you're running a
> >> large network with many users, it's another thing that has to be done.
> >> Why not just have a check box for such an option?
> >
> > With 10.2, you can change it under Expert Options, Default for new
> > users.  I don't remember if that was there before or not.
>
> You can change the umask for new users, but not give them their own
> group.  It's been that way for quite some time.
-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse] Re: Is it possible to set group permissions = owner permissions

2006-12-20 Thread James Knott

Joe Morris (NTM) wrote:

James Knott wrote:
  

Martin Mielke wrote:
  


Hi,

you can always issue a chmod 701 $HOME after your user has been created...
  

  

While that's easy enough to do on a home system, if you're running a
large network with many users, it's another thing that has to be done. 
Why not just have a check box for such an option?


With 10.2, you can change it under Expert Options, Default for new
users.  I don't remember if that was there before or not.

  


You can change the umask for new users, but not give them their own 
group.  It's been that way for quite some time.



--
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse] Re: Is it possible to set group permissions = owner permissions

2006-12-20 Thread Joe Morris (NTM)
James Knott wrote:
> Martin Mielke wrote:
>   
>> Hi,
>>
>> you can always issue a chmod 701 $HOME after your user has been created...
>>   
>> 
>
> While that's easy enough to do on a home system, if you're running a
> large network with many users, it's another thing that has to be done. 
> Why not just have a check box for such an option?
With 10.2, you can change it under Expert Options, Default for new
users.  I don't remember if that was there before or not.

-- 
Joe Morris
Registered Linux user 231871 running openSUSE 10.2 x86_64






-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse] Re: Is it possible to set group permissions = owner permissions

2006-12-20 Thread James Knott
Martin Mielke wrote:
> Hi,
>
> you can always issue a chmod 701 $HOME after your user has been created...
>   

While that's easy enough to do on a home system, if you're running a
large network with many users, it's another thing that has to be done. 
Why not just have a check box for such an option?

-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse] Re: Is it possible to set group permissions = owner permissions

2006-12-20 Thread Martin Mielke
Hi,

you can always issue a chmod 701 $HOME after your user has been created...


HTH,
Martin


- Original Message 
From: James Knott <[EMAIL PROTECTED]>
To: SuSE Linux 
Sent: Wednesday, December 20, 2006 1:39:18 PM
Subject: Re: [opensuse] Re: Is it possible to set group permissions = owner 
permissions


[ snip ]

One thing that would be nice, would be if SUSE would allow individual
user groups, when a user is created.  As it currently is, with the
"users" group and default permissions, anyone can read your home directory.

-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com
--
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse] Re: Is it possible to set group permissions = owner permissions

2006-12-20 Thread James Knott
Greg Wallace wrote:
> On Tuesday, December 19, 2006 @ 5:15 AM, Joachim Schrod wrote:
>
>   
>> Greg Wallace wrote:
>> 
>>> I would like to go through all files and subdirectories of a directory
>>>   
> and
>   
>>> set the group permissions equal to the owner permissions.  Is there a
>>> command that will do this?  This directory has thousands of files and
>>> hundreds of directories under it, so doing this manually isn't feasible.
>>>   
>
>   
>> find directory | while read f
>>do setfacl -m `getfacl "$f" | grep user | sed s/user/group/` "$f"
>>done
>> 
>
>
>   
>>  Joachim
>> 
>
> Joachim:
>   Well, I tried this script but it didn't work.  I put the above code into a
> file, hard coded /root/test for directory to point to a directory called
> test under root that had 4 files under it, and tried executing the script to
> see if it copied over the permissions.  I got the following error when I
> tried to run it --
>
> ': not a valid identifier line 1: read : `f
>
>   

One thing that would be nice, would be if SUSE would allow individual
user groups, when a user is created.  As it currently is, with the
"users" group and default permissions, anyone can read your home directory.

-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse] Re: Is it possible to set group permissions = owner permissions

2006-12-20 Thread Dr. Werner Fink
On Tue, Dec 19, 2006 at 10:19:42PM -0600, Greg Wallace wrote:
> On Tuesday, December 19, 2006 @ 5:15 AM, Joachim Schrod wrote:
> 
> >Greg Wallace wrote:
> >> I would like to go through all files and subdirectories of a directory
> and
> >> set the group permissions equal to the owner permissions.  Is there a
> >> command that will do this?  This directory has thousands of files and
> >> hundreds of directories under it, so doing this manually isn't feasible.
> 
> >find directory | while read f
> >do setfacl -m `getfacl "$f" | grep user | sed s/user/group/` "$f"
> >done
> 
> 
> > Joachim
> 
> Joachim:
>   Well, I tried this script but it didn't work.  I put the above code into a
> file, hard coded /root/test for directory to point to a directory called
> test under root that had 4 files under it, and tried executing the script to
> see if it copied over the permissions.  I got the following error when I
> tried to run it --
> 
> ': not a valid identifier line 1: read : `f

To code above is bourne shell code and the new lines are intended.
You may replace the new lines with `;' ...

 find directory | while read f ; do setfacl -m $(getfacl "$f" | grep user | sed 
s/user/group/) "$f"; done

Or within a shell script

  #!/bin/sh
  
  find ${1+"$@"} | while read f
  do
  m=$(getfacl --omit-header "$f" 2> /dev/null | sed -n 's/user/group/p')
  test -n "$m" || continue
  setfacl -m $m "$f"
  done


  Werner

-- 
  "Having a smoking section in a restaurant is like having
  a peeing section in a swimming pool." -- Edward Burr
-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [opensuse] Re: Is it possible to set group permissions = owner permissions

2006-12-19 Thread Greg Wallace
On Tuesday, December 19, 2006 @ 5:15 AM, Joachim Schrod wrote:

>Greg Wallace wrote:
>> I would like to go through all files and subdirectories of a directory
and
>> set the group permissions equal to the owner permissions.  Is there a
>> command that will do this?  This directory has thousands of files and
>> hundreds of directories under it, so doing this manually isn't feasible.

>find directory | while read f
>do setfacl -m `getfacl "$f" | grep user | sed s/user/group/` "$f"
>done


>   Joachim

Joachim:
  Well, I tried this script but it didn't work.  I put the above code into a
file, hard coded /root/test for directory to point to a directory called
test under root that had 4 files under it, and tried executing the script to
see if it copied over the permissions.  I got the following error when I
tried to run it --

': not a valid identifier line 1: read : `f

Greg W

-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]