Re: Giving a webuser rights to files created by apache under his homedir.

Hello,

On Friday 01 July 2005 11:39, Marius Karthaus wrote:
> web1:/tmp# getfacl test1/
> # file: test1
> # owner: test1
> # group: wwwusers
> user::rwx
> group::---
> other::r-x

It's quite unusual to give the owning group fewer permissions than others. Any 
user other than test1 who isn't in group wwwusers will have read access.

> [...]
> web1:/tmp# su test1
> test1@web1:/tmp$ cd test1/
> test1@web1:/tmp/test1$ ls
> test1@web1:/tmp/test1$ mkdir apache_data_dir
> test1@web1:/tmp/test1$ chmod o+w apache_data_dir/

Here it gets dangerous: Any user other than those in wwwusers can write to 
that directory, unlink files, etc. I doubt that you want this. Use group 
permissions instead.

> [...]
> Can anyone please explain to me how i can use the default ACL in a way
> that actualy works?

Before bothering about ACLs, read a good text on how UNIX file permissions 
work. You seem to have some blank spots in this area. This would be a start: 
http://www.onlamp.com/pub/a/bsd/2000/09/06/FreeBSD_Basics.html?page=last
Then, read the acl(5) manual page and one or more papers on ACLs, for example, 
http://www.suse.de/~agruen/acl/linux-acls/.

Regards,
-- 
Andreas Gruenbacher <[email protected]>
SUSE Labs, SUSE LINUX PRODUCTS GMBH
_______________________________________________
acl-devel mailing list
[email protected]
http://acl.bestbits.at/mailman/listinfo/acl-devel