Re: sudo
Dan Connolly <[email protected]> Mon, 6 Apr 2015 18:10:42 -0500
| Newsgroups | gmane.comp.capabilities.general |
|---|---|
| Message-ID | <CAD2YivamYK+K_fhZVuUeCxh3_P40jNuW3nde9fTQKq5_-44ebQ@mail.gmail.com> |
On Sat, Apr 4, 2015 at 4:34 PM, Lorens Kockum <[email protected]> wrote: > On Sat, Apr 04, 2015 at 03:12:55PM -0500, Dan Connolly wrote: >> Here's a puzzle: Bob wants to share one of his directories with Alice >> so both of them can write to it but nobody else can. >> The only solution(s) I can see involve root access, not to mention the >> global namespace of group names: > ... > KEY=`openssl hash -hex ${KEYLEN:-64}` # slight bashism > REALDIR=~/public/shared/$PETNAME-$KEY > mkdir $REALDIR > chmod ugo=rwx $REALDIR > ln -s $REALDIR ~/private/$PETNAME Unguessable filenames is another technique I've used for attenuated root access, but I hadn't thought of it in this context. Nifty that avoids the need for root altogether. -- Dan Connolly http://www.madmode.com/