I'd suggest that ACLs will be the easiest route here.  They're REALLY screwy 
at first, particularly when combined with Samba, but once you get the hang of 
'em, they work very well.  Adding ACLs to the fs should be fairly easy, 
though, to be honest, I'm running EXT3 on the fs I needed ACLs on.  I suspect 
Reiser has those capabilities already built in, as those are the kinds of 
things reiser was built to provide, but don't quote me on that.

Kev.



On April 18, 2004 12:49 am, Shawn wrote:
> I have a situation where I need to create some user accounts to allow
> remote access to my server (via ssh).  However, these accounts will need to
> be restricted to one specific directory under my web root, in addition to
> their respective home directories.  I'm looking for ideas on how to make
> this happen.
>
> My web root is setup something like this:
>
> wwwroot
>  - site 1
>  - site 2
>  - site 3
>  - site 4
>
> These specific accounts need access to Site 3 only, and should not have
> permissions to read/write files in the other sites.
>
> I suspect the solution is to get a little creative with groups.  The Apache
> web service must be able to access the files in question, so do I create a
> group that includes the users and the Apache service account?  Or is there
> another way to handle this?
>
> Don't know if it helps any, but the file system in question is ReiserFS,
> and I have not enabled ACL's on the server.  (I've purposely kept my
> security configuration simple cuz I'm the only real user of the system -
> until I get these accounts created.)
>
> On a slightly different topic...  Is it possible to implement quota's on a
> Reiser file system?  I've seen one reference that says it's not, but others
> that seem to suggest it is...
>
> Thanks for any tips.
>
> Shawn
>
>
>
> _______________________________________________
> clug-talk mailing list
> [EMAIL PROTECTED]
> http://clug.ca/mailman/listinfo/clug-talk_clug.ca

_______________________________________________
clug-talk mailing list
[EMAIL PROTECTED]
http://clug.ca/mailman/listinfo/clug-talk_clug.ca

Reply via email to