2008/10/6  <[EMAIL PROTECTED]>:
> Hummm... didn't know you could do ACL on linux now.
>
> I'm off to do some reading.
>
>
>
> Christopher Sawtell wrote:
>>
>> Don: For more detailed control of access to disk resources than that
>> offered by the time-tested  POSIX owner, group, and others
>
> I confess I don't know enough about the group side of things.  You can only
> allocate a folder to one group can't you?

True, but you can create as many groups as needed and mix people into
those groups as is your wish.

> That's when you need to go to acl isn't it?

indeed.

The limitations of the POSIX permissions model show up when you have
people of different ranks in groups who should not be able to read
information they have no need to know.

 eg the system-admin person, while having overall control of the
system should not really have access to the details in the
consolidated accounts of a trading group. A data entry person needs
write access to where the data is being entered, but should not really
be able to read files other than the one which is being currently
worked on.



> Anyway, I'll go read that link.
>
> Cheers Don
>
>> you need to
>> use the Access Control List facilities offered by the 2.6 kernel
>> series.
>>
>> http://www.vanemery.com/Linux/ACL/linux-acl.html
>>
>> looks like pretty readable prose on the subject.
>>
>
>
> --
> Don Gould
> 31 Acheson Ave, Mairehau, Christchurch, NZ
> Ph +64 3 348 7235 or + 64 21 114 0699
> www.thinkdesignprint.co.nz
>



-- 
Sincerely etc.
Christopher Sawtell

Reply via email to