Re: [vox-tech] Default directory permissions

2012-02-14 Thread Richard S. Crawford
On Fri, Feb 10, 2012 at 9:05 PM, timri...@appahost.com wrote:

   Original Message 
  Subject: [vox-tech] Default directory permissions
  From: Richard S. Crawford rich...@underpope.com
  Date: Fri, February 10, 2012 5:17 pm
  To: lugod's technical discussion forum vox-tech@lists.lugod.org
 
 
  I have a directory on my server which has several people that can write
 to
  it. Each person has their own username but they all belong to the same
  group. I would like to make sure that every file and directory that is
  created in that directory are group-writable. In other words, if Rita
  (member of group psacln) creates a file or subdirectory, then Ginger
 (also
  a member of group psacln) should be able to write to it or delete it, and
  vice versa.

 The way to achieve group collaboration is to have new files and
 directories
 become the group name of the group, not the default group name of the
 creator. Also, new files and directories need to have the group's
 write bit set. Here are the commands:

 1) sudo chmod g+wxs .
 2) sudo chgrp psacln .
 3) sudo echo umask 0002  /etc/profile

 The key is the s-bit set on the directory. This has the special meaning
 of setting new files' and directories' group name to the group name
 of the directory, not the creator.

 The umask command says to always turn on the group's write bit for new
 files and directories.


All of the users are members of the group psacln and when they create files
or upload them via FTP, the files have the correct group assignment.
However, even after going through the steps you outlined above, new files
are not created with the proper permissions. When I FTP test.test with
Rita's account, the file has permissions -rw-r--r-- set. I need it to be
-rw-rw-r-- so that, say, Robin can edit or even overwrite test.test.


-- 
Sláinte,
Richard S. Crawford (rich...@underpope.com) http://www.underpope.com
Twitter: http://twitter.com/underpope
Facebook: http://www.facebook.com/underpope
Google+: http://gplus.to/underpope
___
vox-tech mailing list
vox-tech@lists.lugod.org
http://lists.lugod.org/mailman/listinfo/vox-tech


Re: [vox-tech] Default directory permissions

2012-02-14 Thread Alex Mandel
On 02/14/2012 09:38 AM, Richard S. Crawford wrote:
 On Fri, Feb 10, 2012 at 9:05 PM, timri...@appahost.com wrote:
 
  Original Message 
 Subject: [vox-tech] Default directory permissions
 From: Richard S. Crawford rich...@underpope.com
 Date: Fri, February 10, 2012 5:17 pm
 To: lugod's technical discussion forum vox-tech@lists.lugod.org


 I have a directory on my server which has several people that can write
 to
 it. Each person has their own username but they all belong to the same
 group. I would like to make sure that every file and directory that is
 created in that directory are group-writable. In other words, if Rita
 (member of group psacln) creates a file or subdirectory, then Ginger
 (also
 a member of group psacln) should be able to write to it or delete it, and
 vice versa.

 The way to achieve group collaboration is to have new files and
 directories
 become the group name of the group, not the default group name of the
 creator. Also, new files and directories need to have the group's
 write bit set. Here are the commands:

 1) sudo chmod g+wxs .
 2) sudo chgrp psacln .
 3) sudo echo umask 0002  /etc/profile

 The key is the s-bit set on the directory. This has the special meaning
 of setting new files' and directories' group name to the group name
 of the directory, not the creator.

 The umask command says to always turn on the group's write bit for new
 files and directories.

 
 All of the users are members of the group psacln and when they create files
 or upload them via FTP, the files have the correct group assignment.
 However, even after going through the steps you outlined above, new files
 are not created with the proper permissions. When I FTP test.test with
 Rita's account, the file has permissions -rw-r--r-- set. I need it to be
 -rw-rw-r-- so that, say, Robin can edit or even overwrite test.test.
 
 

Check the umask settings for that path
http://en.wikipedia.org/wiki/Umask

Thanks,
Alex
___
vox-tech mailing list
vox-tech@lists.lugod.org
http://lists.lugod.org/mailman/listinfo/vox-tech


Re: [vox-tech] Default directory permissions

2012-02-14 Thread timriley
  Original Message 
 Subject: Re: [vox-tech] Default directory permissions
 From: Richard S. Crawford rich...@underpope.com
 Date: Tue, February 14, 2012 9:38 am
 To: lugod's technical discussion forum vox-tech@lists.lugod.org
 
 
 On Fri, Feb 10, 2012 at 9:05 PM, timri...@appahost.com wrote:
 
    Original Message 
   Subject: [vox-tech] Default directory permissions
   From: Richard S. Crawford rich...@underpope.com
   Date: Fri, February 10, 2012 5:17 pm
   To: lugod's technical discussion forum vox-tech@lists.lugod.org
  
  
   I have a directory on my server which has several people that can write
  to
   it. Each person has their own username but they all belong to the same
   group. I would like to make sure that every file and directory that is
   created in that directory are group-writable. In other words, if Rita
   (member of group psacln) creates a file or subdirectory, then Ginger
  (also
   a member of group psacln) should be able to write to it or delete it, and
   vice versa.
 
  The way to achieve group collaboration is to have new files and
  directories
  become the group name of the group, not the default group name of the
  creator. Also, new files and directories need to have the group's
  write bit set. Here are the commands:
 
  1) sudo chmod g+wxs .
  2) sudo chgrp psacln .
  3) sudo echo umask 0002  /etc/profile
 
  The key is the s-bit set on the directory. This has the special meaning
  of setting new files' and directories' group name to the group name
  of the directory, not the creator.
 
  The umask command says to always turn on the group's write bit for new
  files and directories.
 
 
 All of the users are members of the group psacln and when they create files
 or upload them via FTP, the files have the correct group assignment.
 However, even after going through the steps you outlined above, new files
 are not created with the proper permissions.

 When I FTP test.test with
 Rita's account, the file has permissions -rw-r--r-- set. I need it to be
 -rw-rw-r--

The group-write bit is probably not set on the file on the local
computer.
Try setting that first, then FTP. Umask doesn't set any bits not already
set.
Also, FTP may not source /etc/profile, first -- I don't remember.

Consider using scp (or sftp). You first need to:
1) cd /etc/pam.d
2) sudo vi sshd
   == session optional pam_umask.so umask=0002
3) sudo vi login
   == session optional pam_umask.so umask=0002

TAR files are another problem. The group-write bit must first be set.

snip

___
vox-tech mailing list
vox-tech@lists.lugod.org
http://lists.lugod.org/mailman/listinfo/vox-tech


[vox-tech] Default directory permissions

2012-02-10 Thread Richard S. Crawford
I have a directory on my server which has several people that can write to
it. Each person has their own username but they all belong to the same
group. I would like to make sure that every file and directory that is
created in that directory are group-writable. In other words, if Rita
(member of group psacln) creates a file or subdirectory, then Ginger (also
a member of group psacln) should be able to write to it or delete it, and
vice versa.

I have not been able to figure out how to set this up. Can anyone give me a
hand? This is probably something very simple that I just haven't been able
to figure out on my own.

-- 
Sláinte,
Richard S. Crawford (rich...@underpope.com) http://www.underpope.com
Twitter: http://twitter.com/underpope
Facebook: http://www.facebook.com/underpope
Google+: http://gplus.to/underpope
___
vox-tech mailing list
vox-tech@lists.lugod.org
http://lists.lugod.org/mailman/listinfo/vox-tech


Re: [vox-tech] Default directory permissions

2012-02-10 Thread Alex Mandel
On 02/10/2012 05:17 PM, Richard S. Crawford wrote:
 I have a directory on my server which has several people that can write to
 it. Each person has their own username but they all belong to the same
 group. I would like to make sure that every file and directory that is
 created in that directory are group-writable. In other words, if Rita
 (member of group psacln) creates a file or subdirectory, then Ginger (also
 a member of group psacln) should be able to write to it or delete it, and
 vice versa.
 
 I have not been able to figure out how to set this up. Can anyone give me a
 hand? This is probably something very simple that I just haven't been able
 to figure out on my own.
 

I think you're looking for
http://en.wikipedia.org/wiki/Setuid

The other option I'm aware of is to set a umask with group write. I
can't recall if this is done in the mount or if it can be done just on
the directory.

Another option along those lines is to use a package called acl (access
control lists) for fined grained permissions.

Enjoy,
Alex

___
vox-tech mailing list
vox-tech@lists.lugod.org
http://lists.lugod.org/mailman/listinfo/vox-tech


[vox-tech] Default directory permissions

2012-02-10 Thread timriley
  Original Message 
 Subject: [vox-tech] Default directory permissions
 From: Richard S. Crawford rich...@underpope.com
 Date: Fri, February 10, 2012 5:17 pm
 To: lugod's technical discussion forum vox-tech@lists.lugod.org
 
 
 I have a directory on my server which has several people that can write to
 it. Each person has their own username but they all belong to the same
 group. I would like to make sure that every file and directory that is
 created in that directory are group-writable. In other words, if Rita
 (member of group psacln) creates a file or subdirectory, then Ginger (also
 a member of group psacln) should be able to write to it or delete it, and
 vice versa.

The way to achieve group collaboration is to have new files and
directories
become the group name of the group, not the default group name of the
creator. Also, new files and directories need to have the group's
write bit set. Here are the commands:

1) sudo chmod g+wxs .
2) sudo chgrp psacln .
3) sudo echo umask 0002  /etc/profile

The key is the s-bit set on the directory. This has the special meaning
of setting new files' and directories' group name to the group name
of the directory, not the creator.

The umask command says to always turn on the group's write bit for new
files and directories.

snip

___
vox-tech mailing list
vox-tech@lists.lugod.org
http://lists.lugod.org/mailman/listinfo/vox-tech