topic Re: primary group in Operating System - HP-UX

primary group

Scott Van Kalken — Wed, 12 Dec 2001 03:50:12 GMT

I have a question relating to a person's primary group.

Is it possible to set on the fly someone's primary group.

For example, the following directories:

rwxrw---- root:groupA dirA
rwxrw---- root:groupB dirB

If user joe has primary group of groupA and secondary group of groupB joe can obviously access both directories.

This is cool.

However, what if joe wants to create files in dirB. They would be created with group permissions of joe's primary group (groupA) and other people in groupB could not read them (umask).

I do not want to change umask.

Scott.

Re: primary group

Steven Sim Kok Leong — Wed, 12 Dec 2001 04:06:18 GMT

Hi,

Why not use ACLs?

rwxrw---- root:groupA dirA
rwxrw---- root:groupB dirB

For HFS (JFS use setacl),
# chacl '(%.groupA,rw-)(%.groupB,rw-)(%.%,---)' dirB

Refer also to this thread:

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x8f55a22831ebd5118ff40090279cd0f9,00.html

Hope this helps. Regards.

Steven Sim Kok Leong
Brainbench MVP for Unix Admin
http://www.brainbench.com

Re: primary group

Madhu Sudhan_1 — Wed, 12 Dec 2001 04:45:59 GMT

Scott:

What you all need here is switching between groups without changin user id.

The 'newgrp(1)' command helps you to acheive this.

Following is an extract from docs.hp.com

"The newgrp command changes your group ID without changing your user ID and replaces your current
shell with a new one.

If you specify group, the change is successful if group exists and either your user ID is a member of the new group, or
group has a password and you can supply it from the terminal."

Enjoy !

-Madhu

Re: primary group

CPHVF-U Guard — Wed, 12 Dec 2001 10:53:13 GMT

You have (at least) two choices

1. change (You forgot the x-bit for the group)
rwxrwx--- root:groupA dirA
rwxrwx--- root:groupB dirB
to (chmod g+s dir[AB])
rwxrws--- root:groupA dirA
rwxrws--- root:groupB dirB

SGID on a directory:
New files will enherit the group-ownership.
(I don't know if this works on HP-UX, it does in Linux)

2. users can use newgroup to change primary group.

Re: primary group

Wim Rombauts — Wed, 12 Dec 2001 10:58:41 GMT

Scott, if you want that all new files in dirA get groupA and all files in dirB get groupB, the best way is to set the correct group on the directory itself and set the SGID bit on them :
chmod g+s dirA dirB

This way, all users who belong to groupB have access to dirB(as set by the directory permissions) and while accessing dirB, they will use groupB for file creation and modification, even if their primary group is groupA.

And yes, this works on HP-UX.