> If that is the case then you have conflicting desires, because you 
> want to prevent the user from deleting their own files, but you want 
> to allow the mail client to unlink the file.

Light bulb goes on above head -- check out LIDS (lids.org) -- I haven't used 
it in a while, but the short summary is that it provides mandatory access 
control for Linux. If you set up your entire system to be protected by it, a 
lot of stuff will break and it'll probably take a few days to get things 
working normally. However, if you just want to protect the one file, you 
should be able to set it up so that nothing can modify the directory it 
resides in, and explicitly allow /usr/bin/netscape (or whatever) full access 
to the directory. That way, users will not be able to delete the file from a 
shell, but Netscape can continue to do its thing normally.

Hope this helps,
Terry

#include <stddisclaim.h>


Reply via email to