** Files System Permissions **

[Michael Gretton]

I have a fairly common admin problem. I admin a web server and I want my web master to be able to post changes to the server. However, I don't want to give them root to do it. THe directory where they must post html code to is owned by nobody and the group is nobody. It sounds easy enought to add the user to the nobody group; however, for security reasons, the group nobody doesn't have write permissions to the directory. How can I establish a more robust security and file permissions system? I remember from an HP class that there is a way to do it and it has to do with the the files system it is running on but I forget. The files system is VxFS.

Any thoughts?

[Craig Rants]

Use sudo. http://hpux.ee.ualberta.ca/hppd/hpux/Sysadmin/sudo-1.6.2b1/

This should be perfect for what you want to do.

GL,
C

[Helen French]

Hi Mike,

Couple of things:

1) If you are looking for the easiest way, then just create a new group ( say webadmin ) and add all users you need on this. Then give the group full write and read permissions to the particular directory. You can add or delete users from the group in future.

2) If you are looking for additional permission setting, then you may use ACL (Access Control list). With this you can add/set additional permissions in file levels, for each user/group.

3) If you are looking for a more secured system, then you can make use of TRUSTED system mode.

HTH,
Shiju

[Steven Sim Kok Leong]

Hi,

You can use ACL if you are using OnlineJFS 3.3. man setacl.

Hope this helps. Regards.

Steven Sim Kok Leong