Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 5 Dec 2000 08:58:56 -0600 (CST)
From:      Mike Meyer <mwm@mired.org>
To:        Cliff Sarginson <cliff@raggedclown.net>
Cc:        Paul Herman <pherman@frenchfries.net>, Dmitry Karasik <dk@plab.ku.dk>, <questions@FreeBSD.ORG>
Subject:   Re: NGROUPS_MAX in sys/syslimits.h
Message-ID:  <14893.688.472306.158175@guru.mired.org>
In-Reply-To: <E143FUd-0001AR-00@post.mail.nl.demon.net>
References:  <E143FUd-0001AR-00@post.mail.nl.demon.net>

next in thread | previous in thread | raw e-mail | index | archive | help
Cliff Sarginson <cliff@raggedclown.net> types:
> What is needed here is Access Control Lists, which exist on many Unices.
> This is the solution to your problem ! Does BSD support these ?

Yes, as I mentioned in my first reply. See the acl man page for
details.  What's missing are shell tools for manipulating them.

	<mike

> 
> > Paul Herman <pherman@frenchfries.net> types:
> > > On Mon, 4 Dec 2000, Mike Meyer wrote:
> > > > >  Mike> Which begs the question - why do you need so many groups? There may
> > > > >  Mike> be a better solution to the problem that's causing that than kernel
> > > > >  Mike> groups.
> > > > >
> > > > > 21 is not many - but of course, it depends what are you conting :)
> > > > > Our current configuration is that every user possesses a group
> > > > > with same name.
> > > >
> > > > You're right - 21 isn't many. But that number will change every time
> > > > you add a user, and your solution to the problem doesn't scale well.
> > > I never understood the reasoning behind each user having their own
> > > group (with their login name).  Does anyone use this to their
> > > advantage?  A huge "user" or "users" group that each user belongs to
> > > was always the way to go for me.
> > 
> > If there's no natural grouping of users, doing this makes it possible
> > for a user to share their files with other users without sharing with
> > everyone or creating a new group. On the other hand, if you want to
> > share different sets of files with two groups of other users, you need
> > multiple groups anyway. To make proper use of this, you need a too
> > users can use to edit "their" /etc/group entry. Possibly a linux
> > distro has such a tool.
> > 
> > The thing is, doing this with one large group doesn't solve Dmitry's
> > problem, which is that he wants to be able to access the files without
> > giving everyone else access to them.
> > 
> > 	<mike
> > --
> > Mike Meyer <mwm@mired.org>			http://www.mired.org/home/mwm/
> > Independent WWW/Unix/FreeBSD consultant,	email for more information.
> > 
> > 
> > To Unsubscribe: send mail to majordomo@FreeBSD.org
> > with "unsubscribe freebsd-questions" in the body of the message
> 
> 
> 
--
Mike Meyer <mwm@mired.org>			http://www.mired.org/home/mwm/
Independent WWW/Unix/FreeBSD consultant,	email for more information.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?14893.688.472306.158175>