I have Fedora 15 installed on my VPS, and I want to create a user who can only view all files on the system but may only write to its own home folder.
migrated from stackoverflow.com Sep 10 '12 at 2:52
This question came from our site for professional and enthusiast programmers.
I don't know anything about Fedora, but in Unix / Linux, there are only very few directory in general which are group or world writable. The only thing I could really think of at the moment is
You could run something like
In theory, you could modify the permissions of
To get that right, you'd have to change the group of
I also don't understand why you want to limit writes if that user can still read everything.
Modern Operating Systems (Linux, Mac OS, Windows, etc.) are designed in a way that non-admin users generally can't break anything by writing outside their home directories.
If you're worried about file system usage, either put stuff like /tmp onto a separate partition or use disk quotas.
So I can't give you a definite answer on whether or not it's possible to prevent a user from writing outside his home directory - but there's a decent change that you're breaking more than it helps.