1826265 Members
3539 Online
109692 Solutions
New Discussion

Re: privileges

 
Tonatiuh
Super Advisor

privileges

Red Hat Enterprise Linux 3.0

I want user A have READ privileges to all files owned by user B.

How can I do that?
6 REPLIES 6
Tonatiuh
Super Advisor

Re: privileges

[root@ias97 root]# setfacl -m user:MyUser:r /opt/oracle/as/9.0.4/
setfacl: /opt/oracle/as/9.0.4: Operation not supported

Any idea about why it shows this problem?
Ivan Ferreira
Honored Contributor

Re: privileges

Ensure that you have the acl mount option on fstab.

But, if you planify and use correctly the UPG scheme and set group ID on directories, you wont need ACL's. The administration cam be complex.
Por que hacerlo dificil si es posible hacerlo facil? - Why do it the hard way, when you can do it the easy way?
Tonatiuh
Super Advisor

Re: privileges

My /etc/fstab looks like this:

LABEL=/ / ext3 defaults 1 1
LABEL=/boot /boot ext3 defaults 1 2
none /dev/pts devpts gid=5,mode=620 0 0
none /proc proc defaults 0 0
none /dev/shm tmpfs defaults 0 0
/dev/sda2 swap swap defaults 0 0
/dev/cdrom /mnt/cdrom udf,iso9660 noauto,owner,kudzu,ro 0 0
/dev/fd0 /mnt/floppy auto noauto,owner,kudzu 0 0

But I do not know what to do to incllude the ACL in fstab.
xyko_1
Esteemed Contributor

Re: privileges

Hi Tonatiuh,

If I understand your point, if you put user A and B on the same group and chmod 740 all files owned by user B you will have user B with all privileges, user A read only (A will not write nor execute) and no privileges at all to others.

I hope it solve your problem.

Regards,
Xyko
Ivan Ferreira
Honored Contributor

Re: privileges

Change the line:

LABEL=/ / ext3 defaults 1 1


To

LABEL=/ / ext3 defaults, acl 1 1


If the files/directories is under the / filesytem.
Por que hacerlo dificil si es posible hacerlo facil? - Why do it the hard way, when you can do it the easy way?
Tonatiuh
Super Advisor

Re: privileges

xyko,

I cannot change the privileges of each file owned by user B, as the are files of a producto with a great variety o privileges.

I need to give to user A, his own read privilege.