On Fri, May 30, 2003 at 03:14:30PM +0200, Sandra Hernandez wrote:
> Hello,
>
> I would like to know if there exist any way to deny deleting a file
> for a user, but allow this user accessing, removing parts of this file
> or append text? We have problems in our systems because some users
> delete theirs own nsmail file without notice what they are doing.
There are some things you can do but they are all messy. Try this
instead:
mkdir /home/NSMAIL # in caps to keep it out of the way of the usernames.
you could also use /home/.nsmail
move all the nsmail folders out of the users dirs and into the above,
naming each folder after its user. eg if the user is moocow then you'd
do:
mv ~moocow/nsmail /home/NSMAIL/moocow
In /etc/profile (and other startup scripts for other shells used by
your users) put int he following (or its othershell equivalent):
export MAIL_DIR=/home/NSMAIL/`id -nu`
And your problem should prettymuch be solved. If they then do
cd /home/NSMAIL/moocow
rm -fvr *
Then they deserve it. :)
Obviously for new users you'd precreate the right directory. Permissions
should be:
chmod 711 /home/NSMAIL
chmod 700 /home/NSMAIL/*/
That way privacy is kept. The /home/NSMAIL/*/ dirs should be owned by
their respective users (ie moocow will own /home/NSMAIL/moocow)
Hope this helps. :)
(oh yeah. just to be clear, the export line is for bash :)
--
Martin's distress was in contrast to the bitter satisfaction of some
of his fellow marines as they surveyed the scene. "The Iraqis are sick
people and we are the chemotherapy," said Corporal Ryan Dupre. "I am
starting to hate this country. Wait till I get hold of a friggin' Iraqi.
No, I won't get hold of one. I'll just kill him."
- http://www.informationclearinghouse.info/article2479.htm
