Mailinglist Archive: opensuse-security (174 mails)

[Andreas Gruenbacher <a.gruenbacher@xxxxxxxxxxxxxxxxxxxx>]

Rupert Koenig wrote:
> hi!
> i'd like to have a special umask for some areas of the filesystem.
> Unfortunatly it seems that the command <umask> sets a mask only for the
> whole system.

Actually, the umask is a per-process property.

> Does anybody know a way to have different permissions applyed to new
> files and dirs in only a sub-tree of the filesystem?

Access Control Lists (in particular, Default ACLs) handle that. See
<http://www.sunworld.com/swol-06-1998/swol-06-insidesolaris.html> or
<http://major.rithus.co.at/acl/example.html> to learn how Default ACLs work.

Unfortunately, ACLs are not part of the standard kernel yet. If you are willing
to `go beta', you can use one of the ACL Linux kernel patches. The project I'm
involved in myself is at <http://major.rithus.co.at/acl/>. There is also a
second project, <http://aerobee.informatik.uni-bremen.de/acl_eng.html>.
Obviously, I recommend the first patch.

Andreas

------------------------------------------------------------------------
 Andreas Gruenbacher, Vienna University of Technology
 a.gruenbacher@xxxxxxxxxxxx
 Contact information: http://www.infosys.tuwien.ac.at/~agruenba