Re: Permissions Question & Re: Permissions advice needed

2007-01-09 Thread Kirk Strauser
On Tuesday 09 January 2007 1:01 pm, [EMAIL PROTECTED] wrote: > On 1/8/07, Kirk Strauser <[EMAIL PROTECTED]> wrote: >> You could configure sudo to give him access to run that one >> command as root. > One has to be very careful about giving out such access! > root has much power. Hence "sudo", w

Re: Permissions Question & Re: Permissions advice needed

2007-01-09 Thread [EMAIL PROTECTED]
The following suggestion should work for both problems and avoid the difficulties I saw with the other solutions. Write an executable (Korn shell) script owned by the owner of the files to be examined (thus he should have all the access he needs) which checks the user-id of its caller [effective an

Re: Permissions Question

2007-01-09 Thread Jay Chandler
Malcolm Kay wrote: I am confused (or someone is). On all the FreeBSD systems I have immediate access to the file /etc/mail/aliases has the default permissions -rw-r--r--, in other words is readable by anyone. On the other hand /etc/mail/aliases.db is sometimes -rw-r- and sometimes -rw-r--r

Re: Permissions Question

2007-01-08 Thread Malcolm Kay
On Tue, 9 Jan 2007 04:37 am, Jay Chandler wrote: > Sorry for the dumb question this morning-- caffeine hasn't yet > worked its wondrous magic upon my person. > > I've got a user who needs to be able to view (read only) the > aliases file. We'll grant him root access a few weeks after > the eventua

Re: Permissions Question

2007-01-08 Thread Jay Chandler
Robert Huff wrote: Jay Chandler writes: >> I've got a user who needs to be able to view (read only) the aliases >> file. We'll grant him root access a few weeks after the eventual >> heat-death of the universe, so how would you all go about doing this? >> > > Hand him some sheet

Re: Permissions Question

2007-01-08 Thread Robert Huff
Jay Chandler writes: > >> I've got a user who needs to be able to view (read only) the aliases > >> file. We'll grant him root access a few weeks after the eventual > >> heat-death of the universe, so how would you all go about doing this? > >> > > > > Hand him some sheets of printout

Re: Permissions Question

2007-01-08 Thread Jay Chandler
Matthew Seaman wrote: Jay Chandler wrote: I've got a user who needs to be able to view (read only) the aliases file. We'll grant him root access a few weeks after the eventual heat-death of the universe, so how would you all go about doing this? Hand him some sheets of printout?

Re: Permissions Question

2007-01-08 Thread Kirk Strauser
On Monday 08 January 2007 12:57 pm, Andy Greenwood wrote: > I've never used them, but wasn't ACL written just for this scenario? Perhaps, but that seems like a lot more effort to accomplish a relatively easy job. -- Kirk Strauser pgpryAcPuyqUa.pgp Description: PGP signature

Re: Permissions Question

2007-01-08 Thread Andy Greenwood
I've never used them, but wasn't ACL written just for this scenario? On 1/8/07, Kirk Strauser <[EMAIL PROTECTED]> wrote: On Monday 08 January 2007 12:07 pm, Jay Chandler wrote: > I've got a user who needs to be able to view (read only) the aliases > file. We'll grant him root access a few week

Re: Permissions Question

2007-01-08 Thread Kirk Strauser
On Monday 08 January 2007 12:07 pm, Jay Chandler wrote: > I've got a user who needs to be able to view (read only) the aliases > file. We'll grant him root access a few weeks after the eventual > heat-death of the universe, so how would you all go about doing this? You could configure sudo to gi

Re: Permissions Question

2007-01-08 Thread Matthew Seaman
Jay Chandler wrote: > I've got a user who needs to be able to view (read only) the aliases > file. We'll grant him root access a few weeks after the eventual > heat-death of the universe, so how would you all go about doing this? Hand him some sheets of printout? Cheers, Matthe

Re: permissions question

2004-12-29 Thread Lowell Gilbert
Duane Winner <[EMAIL PROTECTED]> writes: > I don't know if I am having a brainfart, something is different, or if > I never had it right to begin with: > > I need to have a shared directory for apache web content: > > /usr/local/htmlstuff > > And a group, "htmlguys", and several users will be m