topic Re: Can SFTP clients change GIDs ? in Operating System - Linux

Can SFTP clients change GIDs ?

Thomas Ritter — Mon, 20 Sep 2010 16:10:28 GMT

If a linux userid has a number of secondary gid, it it possible to change from the primary gid to a secondary gid within an sftp client ?

Re: Can SFTP clients change GIDs ?

Ivan Ferreira — Mon, 20 Sep 2010 16:33:39 GMT

You can set the SGID bit to the upload directory. For example:

USER: jdoe GROUPS: jdoe,admin

Directory: /data/upload
chown root:admin /data/upload
chmod 2770 /data/upload

If jdoe upload a file to /data/upload, the group of the file will be admin.

Cheers.

Re: Can SFTP clients change GIDs ?

Thomas Ritter — Mon, 20 Sep 2010 16:43:42 GMT

Ivan, what if joe wanted to read a file whereby the access is only provided by the gid ? Joe's primary gid is abc but the file's gid is def.

If joe has groups abc and def and his primary group is abc can he access the file by changing to his secondary group from within an sftp client ?

Re: Can SFTP clients change GIDs ?

Ivan Ferreira — Mon, 20 Sep 2010 16:48:13 GMT

>>> Ivan, what if joe wanted to read a file whereby the access is only provided by the gid ? Joe's primary gid is abc but the file's gid is def.

If the group permissions allows read, then he can read the file, as jdoe should be member of def.

>>> If joe has groups abc and def and his primary group is abc can he access the file by changing to his secondary group from within an sftp client ?

Group membership is cumulative, no actions needed.

Re: Can SFTP clients change GIDs ?

Thomas Ritter — Mon, 20 Sep 2010 16:54:34 GMT

>>>Group membership is cumulative, no actions needed.

Within the context of an sftp client, are you saying the the access algorithm will check primary gid and then all secondary gids to see if, say read, access should be given ?

Re: Can SFTP clients change GIDs ?

Ivan Ferreira — Mon, 20 Sep 2010 16:59:57 GMT

Yes.