Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #240304

Re: Development permissions

Show all headers | View raw

	Hi.

On Fri, Sep 24, 2021 at 11:47:20AM +0200, Alex Mestiashvili wrote:
> On 9/24/21 11:27 AM, Reco wrote:
> > 	Hi.
> > 
> > On Fri, Sep 24, 2021 at 10:22:00AM +0200, Alex Mestiashvili wrote:
> > > On 9/22/21 8:53 AM, Reco wrote:
> > > > 	Hi.
> > > > 
> > > > On Tue, Sep 21, 2021 at 11:09:41PM -0400, Paul M. Foster wrote:
> > > > > Without setting directory and file permissions to 777, how do you
> > > > > allow the above? What combinations of groups, directory
> > > > > owners/permissions and file owners/permissions might make this
> > > > > possible?
> > > > 
> > > > Solution #1:
> > > > 
> > > > 1) Make a group, add users to it.
> > > > 2) Chgrp directory to the group from step 1.
> > > > 3) Set directory permissions to 2770 (i.e. you will need setgid on
> > > > directory), or 2775 if you need world-readable directory.
> > > > 4) Ensure users' umask is set to 0007.
> > > > 
> > > > 
> > > > Solution #2:
> > > > 
> > > > Set ACL to u:<user>:rwx on a directory, and make sure it made to the
> > > > "default" set of permissions (i.e. you'll need setfacl -d).
> > > 
> > > In addition to umask and acl, there is also a FUSE based bindfs.
> > 
> > FUSE = slow + CPU wastage
> 
> Well, fast enough and CPU time is cheap ;)

An old argument. How exactly I can replace CPU on my Raspberry Pi 1B
which is still in service and doing its job?


> Setting umask might be insecure/problematic for non-unix people.
> Not every filesystem support ACL.

Every filesystem that's worthy of such title does support ACL.
Inperfect filesystems do not indeed, but replacing a filesystem is much
easier than replacing a CPU.


> Bindfs is just another useful tool...

That's something I agree with. Every tool has its purpose, and surely
bindfs has one too. But using a tool outside of its purpose instantly
transforms a tool to a kludge.


> > Using a filesystem the way it was intended is much cleaner solution.
> ACL is a workaround for the "intended unix permissions" isn't?

That's one option about it. Another one is ACL is an evolution of POSIX
filesystem permissions.
Whichever you prefer, of course.

Reco

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Development permissions "Paul M. Foster" <paulf@quillandmouse.com> - 2021-09-22 05:20 +0200
  Re: Development permissions Charles Curley <charlescurley@charlescurley.com> - 2021-09-22 05:50 +0200
    Re: Development permissions "Paul M. Foster" <paulf@quillandmouse.com> - 2021-09-22 06:20 +0200
      Re: Development permissions David Christensen <dpchrist@holgerdanske.com> - 2021-09-22 06:30 +0200
      Re: Development permissions Felix Miata <mrmazda@earthlink.net> - 2021-09-22 06:40 +0200
      Re: Development permissions Anssi Saari <as@sci.fi> - 2021-09-22 09:30 +0200
  Re: Development permissions Georgi Naplatanov <gosho@oles.biz> - 2021-09-22 05:50 +0200
    Re: Development permissions "Paul M. Foster" <paulf@quillandmouse.com> - 2021-09-22 06:20 +0200
      Re: Development permissions Andrei POPESCU <andreimpopescu@gmail.com> - 2021-09-22 07:40 +0200
        Re: Development permissions Andrei POPESCU <andreimpopescu@gmail.com> - 2021-09-25 08:40 +0200
      Re: Development permissions Georgi Naplatanov <gosho@oles.biz> - 2021-09-22 07:40 +0200
      Re: Development permissions Tim Woodall <debianuser@woodall.me.uk> - 2021-09-22 10:30 +0200
  Re: Development permissions Reco <recoverym4n@enotuniq.net> - 2021-09-22 09:00 +0200
    Re: Development permissions Alex Mestiashvili <amestia@rsh2.donotuse.de> - 2021-09-24 10:30 +0200
      Re: Development permissions Reco <recoverym4n@enotuniq.net> - 2021-09-24 11:30 +0200
        Re: Development permissions Alex Mestiashvili <amestia@rsh2.donotuse.de> - 2021-09-24 11:50 +0200
          Re: Development permissions Reco <recoverym4n@enotuniq.net> - 2021-09-24 15:30 +0200
        Re: Development permissions <tomas@tuxteam.de> - 2021-09-24 14:10 +0200
          Re: Development permissions Reco <recoverym4n@enotuniq.net> - 2021-09-24 15:10 +0200
            Re: Development permissions Andy Smith <andy@strugglers.net> - 2021-09-24 15:50 +0200
            Re: Development permissions <tomas@tuxteam.de> - 2021-09-24 16:10 +0200
  Re: Development permissions Joe Pfeiffer <pfeiffer@cs.nmsu.edu> - 2021-09-24 04:40 +0200

csiph-web