topic Re: Directory permission in Operating System - HP-UX

Directory permission

hangyu — Fri, 02 Feb 2007 01:15:53 GMT

there is a directory eg. /tmp/ora_src , , the directory owner is ora:edp , -rw-rw-r-- , now all edp group user can overwrite in it .If I would like to allow another group ( except edp ) of user also can overwrite file in it , if not change to -rw-rw-rw- , can advise what can i do ? thx

Re: Directory permission

Peter Godron — Fri, 02 Feb 2007 02:53:40 GMT

Hi,
if it is a JFS you could use acl (See man setacl) to define edp and the new group as write enabled.
Or you could add the users to the edp group as a secondary group.

Re: Directory permission

Yarek — Fri, 02 Feb 2007 02:57:24 GMT

Hi,

I agree with Peter, Aceess Control List (ACL)
would be a good solution.

rgds

Re: Directory permission

V. Nyga — Fri, 02 Feb 2007 08:12:32 GMT

Hi,

or add the other users to group edb ...

Volkmar

Re: Directory permission

Dennis Handly — Sat, 03 Feb 2007 02:05:04 GMT

>Peter: Or you could add the users to the edp group as a secondary group.

To make this easy, you need to link /etc/logingroup to /etc/group.

Re: Directory permission

Raj D. — Sat, 03 Feb 2007 02:40:34 GMT

Hangyu,

.If I would like to allow another group :
Well , you can use acl for that purpose.
Check this out:

http://docs.hp.com/en/B9106-90007/setacl.1.html

Secendly if you want to allow another user, to access that dir, simply add the use to that group using usermod or sam,

Cheers,
Raj.

Re: Directory permission

perumal_2 — Sat, 03 Feb 2007 04:42:53 GMT

Hi

acl would be best fit for your requirement.
Refer the man page of setacl & getacl to get more ideas. If there are existing files and you need to have the same privilege like the new ones after the you set the directory level acl, you need to setacl for those files individually (you can write a small script to automate it)

TQ
Perumal

Re: Directory permission

deepakinit — Sat, 03 Feb 2007 05:49:07 GMT

hai

make the other groups as the secondary group of the owner using usermod -G option.