Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 16 Jun 2008 08:21:25 -0400
From:      Bill Moran <wmoran@potentialtech.com>
To:        mister.olli@googlemail.com
Cc:        freebsd-questions@freebsd.org
Subject:   Re: Enforce minimal file/ dir permissions
Message-ID:  <20080616082125.7dd23b70.wmoran@potentialtech.com>
In-Reply-To: <1213611664.6398.275.camel@phoenix.blechhirn.net>
References:  <1213611664.6398.275.camel@phoenix.blechhirn.net>

next in thread | previous in thread | raw e-mail | index | archive | help
In response to Mister Olli <mister.olli@googlemail.com>:

> Hi...
> 
> on my filer I have to enforce minimal file permission of 664 for files
> and 755 for directorys.
> 
> no user should be able to change them to a value less than that.
> 
> any ideas how to do this?

Look at MAC and the bsdextended module (filesystem firewall):
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/mac.html
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/mac-bsdextended.html

-- 
Bill Moran
http://www.potentialtech.com



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20080616082125.7dd23b70.wmoran>