From owner-freebsd-questions  Fri Jan  5 15:26:34 2001
From owner-freebsd-questions@FreeBSD.ORG  Fri Jan  5 15:26:31 2001
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from comp1.mastery.ca (lan12.dzyn.win.mnsi.net [208.28.54.140])
	by hub.freebsd.org (Postfix) with ESMTP id 446BC37B400
	for <freebsd-questions@freebsd.org>; Fri,  5 Jan 2001 15:26:31 -0800 (PST)
Received: from lan4 (rcmd01m01-33.bctel.ca [207.194.159.33])
	(authenticated)
	by comp1.mastery.ca (8.11.1/8.11.1) with ESMTP id f05NcsD43270;
	Fri, 5 Jan 2001 18:38:55 -0500 (EST)
	(envelope-from rmasse@max-info.net)
Message-ID: <000601c0776f$05ebf980$0600a8c0@Home>
From: "Ryan Masse" <rmasse@max-info.net>
To: "Mike Meyer" <mwm@mired.org>
Cc: "FreeBSD-Questions" <freebsd-questions@freebsd.org>
References: <14934.21923.31724.82507@guru.mired.org>
Subject: Re: chmod for a group users.
Date: Fri, 5 Jan 2001 18:27:03 -0500
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.50.4522.1200
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

You can chmod 711 everyones home dir rendering it impossible for anyone to
read the contents of the user's dir. You need to do the same to
/usr/share/skel to properly set those permissions for all new users.


----- Original Message -----
From: "Mike Meyer" <mwm@mired.org>
To: "Dead Line" <dead_line@hotmail.com>
Cc: <questions@freebsd.org>
Sent: Friday, January 05, 2001 6:15 PM
Subject: Re: chmod for a group users.


> Dead Line <dead_line@hotmail.com> types:
> > Peace,
> >
> > I would like to thank all of you first, for the help and the support
> > you give.
> >
> > Im on FreeBSD 4.2-Release.
> > and i have many groups created
> > what im tired from is this..
> >
> > I tried to restrict the users of the group to only wrx thier /home/base
> > only (thier files only), and never can read (cat) any other file,
> > whatever its in thier group or no. and they cannot log into others
> > users dirctries.
> >
> > I Couldnot.
>
> Doesn't surprise me - the Unix permissions system isn't designed to
> make cooperation easy, so it doesn't handle negative permissions
> well. You should investigate jails and chroot'ed processes, which are
> designed for this kind of thing.
>
> <mike
> --
> Mike Meyer <mwm@mired.org> http://www.mired.org/home/mwm/
> Independent WWW/Perforce/FreeBSD/Unix consultant, email for more
information.
>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message
>




To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message