On Friday 04 July 2008, Florian Philipp wrote: > Hmm, good point. I will monitor the situation. > If there are any occurrences of wrong permissions, I think it will be > sufficient to make an if-clause before setting the umask but maybe it > proves unneccessary.
I think what you really want in this case is to set the umask to 0007 for human users and leave it as is for system users. You could either check for UID > 1000 in /etc/profile, or explicitly add the umask setting to each existing user's .bashrc. Also add it to /etc/skel to enable it for any new users in the future. Which is starting to get more complex than a simple acl :-) Experience has taught me that these general principles apply to Unix permissions pretty much always: - the normal /user/group/rwx scheme works just fine 99% of the time - 1% of the time you have an unusual need that the above doesn't cater for, but a simple unobtrusive acl does. These cases are usually obvious. - if you are using acl's a lot, there's probably something wrong with your permission scheme -- Alan McKinnon alan dot mckinnon at gmail dot com -- [email protected] mailing list
