Re: [netatalk-admins] user and groups names


Subject: Re: [netatalk-admins] user and groups names
From: chuck yerkes (Chuck@Yerkes.com)
Date: Mon Dec 08 1997 - 14:18:10 EST


It is claimed, but unverified, that Philip S. Wachtel wrote:
> Does anyone know how to configure atalk so that users can write and read
> files in their home directories as their own user names and read and write
> to shared directories as nobody?

I think you're asking the wrong question.

1st) nobody really shouldn't be allowed to write anywhere
     (maybe /tmp). This is the user used for things that
     you want NO priviledge for - like web servers, etc.
     Having files around that "nobody" can overwrite is
     just a bad plan. Think of another user, like "mac".

2nd) You likely really want to setup group permissions. I wish
     people would mention their OS, but I'll try:
    -Set up the writers in a specific group (not necessarily
     their primary group).
    -Set a shared directory up with group write privs (and
     setgid so the gid of the new files in it are that group).
     You MIGHT want to run a cron job that does chmod g+w to
     that directory (or use cfengine from cron to watch it).

chuck



This archive was generated by hypermail 2b28 : Sat Dec 18 1999 - 16:28:24 EST