To keep it secure, I would like one group to have rw permissions on
one directory, and a few other groups to have only read permissions in
that same directory. But I don't want it to have a world read
permission. Is this possible? I've done some searching, but couldn't
find anything.
Thanks,
BP
That is three different levels of group permission. Generic *nix only offers
two (group, others) without the use of specialized file-access schemes.
To allow two level of access:
mkdir /testDir
chgrp privilegedGroup /testDir
chmod 775 /testDir
Now only the privileged group (and the owner) has write access to /testDir.
Other groups and users have read and execute but no write.
The way to assign users to such groups is to set their additional group
memberships -- any particular user can belong to a large number of groups.
Why not control world access simply by not making the directory available to
the world?
--
Paul Lutus
www.arachnoid.com
Try something like this:
someDir/someOtherDir/files*
where someDir is rwxr-x--- someUser someGroup
and someOtherDir rwxrwxr-x someUser someOtherGroup
Unless I'm mistaken this would allow someGroup to read the directory
someOtherDir, while only users in both someGroup _and_ someOtherGroup
can write to the dir.
someUser should of cause be the one responsible for setting up this
scheme, and would have full access to the directories.
Hope this helps.
/dossen