Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 18 Jan 2011 12:10:37 -0800
From:      Steve Kargl <sgk@troutmask.apl.washington.edu>
To:        Ihor R <kaba@goodnet.com.ua>
Cc:        kib@freebsd.org, freebsd-amd64@freebsd.org
Subject:   Re: amd64/154112: user can delete file witch owned by root:wheel
Message-ID:  <20110118201037.GA63079@troutmask.apl.washington.edu>
In-Reply-To: <c22200ee7f20df00817966dbd7d3a6c9@goodnet.com.ua>
References:  <201101181622.p0IGMrfs074713@freefall.freebsd.org> <c22200ee7f20df00817966dbd7d3a6c9@goodnet.com.ua>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Jan 18, 2011 at 09:11:05PM +0200, Ihor R wrote:
> On Tue, 18 Jan 2011 16:22:53 GMT, kib@FreeBSD.org wrote:
> >User home directory is owned by user, right ?
> >The system works as intended, read about unix file permission model.
> 
> The home user directory is owned by user, but I quote don't understand 
> how I can provide hosting service for my users, if anybody user can 
> delete any files in his home directory. By example:
> 

man chflags

su root
cd /usr/home/kargl
touch zxc.txt
chown root:wheel zxc.txt
chflags schg /usr/home/kargl/zxc.txt
exit

su kargl
troutmask:kargl[201] rm zxc.txt
override rw-r--r--  root/wheel schg for zxc.txt? y
rm: zxc.txt: Operation not permitted


-- 
Steve



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20110118201037.GA63079>