Re: Negative permissions WITHOUT ACLs



Starfish <frel8817@xxxxxxxxxxxxx> wrote:
Here goes: How do you specify negative permission¹ in Unix/Linux
without using ACLs?

You can't.

¹E.g. saying that the user "Ellen" should not have write access to a
file regardless of the permissions given to her groups.

Use groups. Do not add Ellen to that group, which has the rights.

Yours,
VB.
--
Viel schlimmer als die Implementation von PHP ist jedoch das Design.

Rudolf Polzer in de.comp.security.misc
.



Relevant Pages

  • Re: about common group & user ID space (PR kern/14584)
    ... most security "extensions" I've seen contain relatively ... many applications exist that make strong ... permissions: uid 0 and the uid used to represent NOVAL in vop_setattr ... I should take a moment also to respond to your comments on ACLs. ...
    (FreeBSD-Security)
  • Re: tar or zipping files to which you have no explicit access?
    ... not possible to hide anything from Administrators. ... archive regardless of their permissions or acls. ... If one cannot set up ACLs to work the way he/she want, ... After archiving the objects into to a single ...
    (microsoft.public.win2000.cmdprompt.admin)
  • Re: Drag-and-drop removes permissions (and who knows what else)
    ... moving maintains the ACLs on the file being copied. ... On the Security property page (when in safe mode) there are no ... > permissions for anyone listed, ... How do I stop dragging from screwing with the ...
    (microsoft.public.windowsxp.security_admin)
  • Re: default acls on directory and files
    ... It's obviously had its permissions or ACL ... I made a chmod after applying the acls *grrr* ... So something has fiddled with the mask since ... comment = Projekte-Bereich Radar ...
    (comp.unix.solaris)
  • Re: Max number of ...
    ... > I'm thinking about setting up a database that would contain some matrix ... one matrix would contain a mapping between a directory tree ... I wouldn't want to support /user/ based permissions, ... ACLs might be nice for certain situations, ...
    (comp.unix.bsd.freebsd.misc)