Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 9 May 2003 16:04:01 +0000
From:      Philip Reynolds <philip.reynolds@rfc-networks.ie>
To:        freebsd-ipfw@freebsd.org
Subject:   Re: Allow all traffic for a specific process
Message-ID:  <20030509160401.GA5244@rfc-networks.ie>
In-Reply-To: <200305081951.35493.dgw@liwest.at>
References:  <200305062208.06242.dgw@liwest.at> <200305071629.17103.dgw@liwest.at> <003a01c3152b$2810c2f0$4508a8c0@Beastie> <200305081951.35493.dgw@liwest.at>

next in thread | previous in thread | raw e-mail | index | archive | help
Daniela <dgw@liwest.at> 29 lines of wisdom included:
> > > home directory.
> > > I don't want my files to be writable by others.
> > > How do I do that?
> >
> > The files just need to be readable by the GID that the process runs as, not
> > writable.
> 
> 
> I mean, I don't want my files to be readable and writable by anyone else.
> The process creates and writes the files, so it needs write access.

Run the process as a separate user.

Create a group, and add yourself and the user that the process is
running under to that group.

Make the directory under your home directory writeable by your group
(chmod g+rw /path/to/dir) 

Set the appropiate umask(2) or use chmod(2) to create the appropiate
permissions on the files.

-- 
Philip Reynolds                      | RFC Networks Ltd.
philip.reynolds@rfc-networks.ie      | +353 (0)1 8832063
http://people.rfc-networks.ie/~phil  | www.rfc-networks.ie



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030509160401.GA5244>