-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

The Tuesday 2007-03-13 at 01:51 -0000, Stuart Neill wrote:


> > Understood now? :-)
> 
> I possibly do understand although my phrasing might not have been 
> particularly 
> precise.
> 
> File permissions are as they are until modified firstly by any entry 
> in /etc/permissions.easy and then by /etc/permissions.local for a system such 
> as mine where PERMISSION_SECURITY within /etc/sysconfig/security is set 
> to "easy local". Any User Account will operate with these permissions. Is 
> this better?

Perfect! :-)

Well, except the user account part. It affects system files, it is not 
used for user's files.

There is another mechanism that sets some permissions for devices based on 
who is logged in, for instance.


> If I do find that I have a permissions problem is it then better practice to 
> modify  /etc/permissions.local than to change a files permission more 
> directly?

If a file is listed in /etc/permissions.easy, and the permissions it sets 
are not those you want, then it is much better to add your settings to 
/etc/permissions.local.

If it is not listed, then you can change the permissions directly, as the 
system will not modify it back - except if the file is replaced by an rpm 
update.

What you should not do is edit /etc/permissions.easy (nor secure nor 
paranoid).

- -- 
Cheers,
       Carlos E. R.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Made with pgp4pine 1.76

iD8DBQFF9gcNtTMYHG2NR9URAiUnAKCANZMCyhhhRsIkxcp0u0XKiUS1dwCggt2c
4eWxVGIXnpoVoZKyCsYfnC8=
=JYEd
-----END PGP SIGNATURE-----

-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to