555 gives no write access to the dir, and the files are covered by their own perms, so I fail to see any relevance to your comment - sorry . . .

640 is decent for files, not so much for directories - as noted, the fields mean different things on dirs . . .

From the man pages:

       The  letters  rwxXst select file mode bits for the affected users: read        (r), write (w), execute (or search for directories) (x), execute/search        only  if  the file is a directory or already has execute permission for        some user (X), set user or group ID on execution (s), restricted  dele-

So while direct access may well still work, there is *ZERO* liability in allowing search, and frankly, I don't know what tests NUT may be doing to find it's files pre-open, and some may block without that attribute . . .

For what it's worth . . .

- Tim


On 08/12/2020 03:08 AM, Manuel Wolfshant wrote:
On 8/12/20 8:10 AM, Tim Dawson wrote:
For directory permissions, the "x" priv determines if you can access the directory, so going from 555 (r-x,r-x,r-x) to 640 (rw-,r--,---) pretty much locks out access to the dir. Myself, I'd go back to 555. 640 essentially locks the group "nut" out . . .

- Tim

At least if on Todd's system the access rights are identical to mine, no, nut is just fine with 640 because the whole directory is owned by group nut. And nut ( or anyone else but root, actually ) has no business in modifying the config files.  Actually I'd be quite concerned if user "nut" wanted to modify its own config.

Logs are written somewhere else.



_______________________________________________
Nut-upsuser mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/nut-upsuser

--
Tim Dawson

972-567-9360


_______________________________________________
Nut-upsuser mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/nut-upsuser

Reply via email to