Re: Negative permissions WITHOUT ACLs

Starfish <frel8817@xxxxxxxxxxxxx> wrote:
Here goes: How do you specify negative permission¹ in Unix/Linux
without using ACLs?

You can't.

¹E.g. saying that the user "Ellen" should not have write access to a
file regardless of the permissions given to her groups.

Use groups. Do not add Ellen to that group, which has the rights.

Yours,
VB.
--
Viel schlimmer als die Implementation von PHP ist jedoch das Design.

Rudolf Polzer in de.comp.security.misc
.

Relevant Pages

  • Re: about common group & user ID space (PR kern/14584)
    ... most security "extensions" I've seen contain relatively ... many applications exist that make strong ... permissions: uid 0 and the uid used to represent NOVAL in vop_setattr ... I should take a moment also to respond to your comments on ACLs. ...
    (FreeBSD-Security)
  • Re: Folder/Drive Permissions
    ... applies the stored acls to files in directory. ... changes the owner of all matching names. ... the permissions replace any previously granted explicit permissions. ... - container inherit ...
    (microsoft.public.windows.vista.security)
  • Re: tar or zipping files to which you have no explicit access?
    ... not possible to hide anything from Administrators. ... archive regardless of their permissions or acls. ... If one cannot set up ACLs to work the way he/she want, ... After archiving the objects into to a single ...
    (microsoft.public.win2000.cmdprompt.admin)
  • SELinux preventing D-Bus starting ConsoleKit etc - Was: F10 - pulseaudio not running
    ... On my broken desktop there are no ACLs granting extra permissions. ... I also noticed that on my broken desktop, console-kit-daemon is not ... I have identified that my issues are caused by SELinux. ...
    (Fedora)
  • Re: Drag-and-drop removes permissions (and who knows what else)
    ... moving maintains the ACLs on the file being copied. ... On the Security property page (when in safe mode) there are no ... > permissions for anyone listed, ... How do I stop dragging from screwing with the ...
    (microsoft.public.windowsxp.security_admin)