On Sat, 31 Jul 1999, Steve Youngs wrote:

> Hey! Did you see what Matthew Sachs wrote on Jul 30 ?
> 
> MS> On Fri, 30 Jul 1999, Jarmo Paavilainen wrote:
> MS> >> Or are you talking about a file with these kind of permissions...
> MS> >>        Owner - root
> MS> >>        Group - Superuser (root) read/write
> MS> >>        Group - users read
> MS> >>        Group - busers read/write
> MS> >> 
> MS> >> If that's the case, then I'm not sure how you would go about it.
> MS> >
> MS> >Well thats what I want/need.
> MS> 
> MS> Don't have a Linux system handy to test this with (I'm at work) but how
> MS> about:
> MS> 
> MS> bash# touch thefile
> MS> bash# chown root.busers thefile
> MS> bash# chmod 660 thefile
> MS> bash# ln thefile thefile-l
> MS> bash# chown root.users thefile-l
> MS> bash# chmod 640 thefile-l
> 
> Nope, this wouldn't work because once you create the link everything you
> do to thefile-1 happens to thefile.
> 
> So as soon as you... chown root.users thefile-1  ... thefile's ownership
> changes as well.

Hmm, could you make it owned by a dummy user who is a member of users, and
have a binary that you can use to access the file which only the users
group can run and is suid to the dummy user?

-- 
Matthew Sachs           [EMAIL PROTECTED]     PGP Key ID: 0x93EA1151
(PGP public key available at http://www.zevils.com/pgpkey.asc)
-- random fortune quote --
Brain fried -- Core dumped

Reply via email to