Hello All,

I have a new HPUX system going into production and it will be used by 2 projects. One of the contract requirements is the 2 groups can not have access to the others work or data. I believe I have the system pretty well locked up using groups and permissions and selective mounting of RAID partitions. However the one problem I see that I can not figure out:

Is it possible to prevent a user from changing the permissions on their home directory?

If I set the permissions at 750 the other group can not access the files. However if the user/owner decides to change them to anything more laxed, like 755, then the other group will have access to any proprietary data.

I realize that changing the permissions will most likely be a deliberate act, but I do have a couple of user that are rather lax in following the rules.

Thanks in advance for your responses.

Dan L.