Tag Info

Hot answers tagged

3

The reasoning for this question is questionable ... To critique your desired solution of creating a new user -- even if other root users can't change new-user's password they don't need to since root can read any file or change the file permissions of the file -- they don't ever need to "be" that user." I you have terabytes of data you want to prevent ...


2

Ultimately if you give someone root access to your system, you give them everything on the system, that's why it is important for you to trust people you give root to.


1

I suppose you could set an immutable extended filesystem attribute on /etc/shadow. That will prevent all changes to passwords, until the root user undoes the immutable bit. The command is "chattr +i /etc/shadow" If you are provisioning root access to a professional sysadmin you're supposed to assume that they won't change the password if you ask them not to ...


1

It was a bug with gnu mkdir (#14371), it was fixed in coreutils 8.22. affected: Debian Wheezy 7, RHEL/CentOS 5 and 6 are affected (and probably Ubuntu Trusty 14.04) not affected: Debian 8 Jessie, RHEL/CentOS 7 (and probably Tbuntu Utopic 14.10) There are a few workaround. Workaround #1: wrapper (already suggested by Mark Wagner) Since mkdir works you ...


1

This is a typical job for ACLs :-) Your example $ mkdir /tmp/foo Set the permissions for the directory itself $ setfacl -m g::rwx -m o::rx /tmp/foo Set the permissions for the newly created directory and files in that directory. $ setfacl -m default:g::rwx -m o::rx /tmp/foo Test $ mkdir /tmp/foo/bar $ touch /tmp/foo/bar/baz.py $ ls -ld ...


1

The ACL are used and active over NFS. Use the command nfs4_getfacl to show the ACL on an NFSv4 mount: $ nfs4_getfacl /tmp/test A::OWNER@:rwatTnNcCy A::alice@nfsdomain.org:rxtncy A::bob@nfsdomain.org:rwadtTnNcCy A:g:GROUP@:rtncy D:g:GROUP@:waxTC A::EVERYONE@:rtncy D::EVERYONE@:waxTC The reason why the ACL look so different compared to Linux ACL? Because ...


1

The answer in the Permissions Create a group and add your users to it. Create the folder structure Put the files in the folders Set the proper write permission on the files so the group can read write and modify Make the folder structure read only, you'll need to do this on every folder Disable inherit permissions folder options -> Security -> Advanced -> ...



Only top voted, non community-wiki answers of a minimum length are eligible