Go Back   The UNIX and Linux Forums > Operating Systems > AIX
Search Forums:



AIX AIX is IBM's industry-leading UNIX operating system that meets the demands of applications that businesses rely upon in today's marketplace.

Closed Thread    
 
Thread Tools Search this Thread Display Modes
    #1  
Old 03-10-2010
Registered User
 

Join Date: Dec 2008
Location: China
Posts: 13
Thanks: 0
Thanked 0 Times in 0 Posts
Does ACL can only grant/deny access for specific command?

Dear AIX/UNIX experts:

I have a demand to restricted a file to be copy by others, but this file must can be read by others/Applications.

As I tried, the chmod command cannot fulfill this requirement. But not sure if the ACL can achieve this function or not ?

Could anybody give me your valuable advice ?

Thanks a lot!

David
Sponsored Links
    #2  
Old 03-10-2010
amitranjansahu's Avatar
Registered User
 

Join Date: Jan 2009
Location: Bangalore,INDIA
Posts: 503
Thanks: 4
Thanked 26 Times in 26 Posts
check this link

http://en.wikipedia.org/wiki/File_system_permissions

If u want to achieve this give read permission to all


Code:
chmod 444 filename

For full permision to the user and read permission to others & group.


Code:
chmod 744 filename


Last edited by amitranjansahu; 03-10-2010 at 04:10 AM..
Sponsored Links
    #3  
Old 03-10-2010
Registered User
 

Join Date: Dec 2008
Location: China
Posts: 13
Thanks: 0
Thanked 0 Times in 0 Posts
Hi amitranjansahu,

Thanks for your response.

Your solution would allow the other user can copy the file!

What I want is: allow the other user to read but restrict them to copy that file.
    #4  
Old 03-10-2010
pludi's Avatar
pludi pludi is offline Forum Staff  
Cat herder
 

Join Date: Dec 2008
Location: Vienna, Austria, Earth
Posts: 5,486
Thanks: 38
Thanked 324 Times in 301 Posts
Just a question: how exactly should the system differentiate between a user reading the file, and a user reading the file and saving the contents to a different file? That would only work if you could restrict the read permission to a certain program, and only that program, which isn't possible with AIX ACLs as far as I know.
Sponsored Links
    #5  
Old 03-10-2010
Registered User
 

Join Date: Dec 2008
Location: China
Posts: 13
Thanks: 0
Thanked 0 Times in 0 Posts
Hi Pludi,

Thanks for explanations. I understand what is your concern.
First, the file is not a text file(maybe compiled).
Second, I just restrict it to be used on this system only.

Thanks!
Sponsored Links
    #6  
Old 03-10-2010
dukessd dukessd is offline Forum Advisor  
Registered User
 

Join Date: Sep 2006
Posts: 450
Thanks: 3
Thanked 20 Times in 18 Posts
If a file can be read, it can be copied.
Simple.
If the file has read permission then the user with read permission can simply read the file and direct the output to another file, then they have a copy.
I do not think you can stop a file with read permission from being copied.
cat file > file2
Then you have a copy of file called file2.
Even if it is a bin file cat -vet file > file2 will probably make a usable copy.
How could you stop this?
Permissions and even acl will not help here.
Sponsored Links
    #7  
Old 03-11-2010
Vit0_Corleone's Avatar
Registered User
 

Join Date: Dec 2009
Posts: 133
Thanks: 13
Thanked 3 Times in 3 Posts
devyfong have you tried restricted Shell?
Sponsored Links
Closed Thread

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

More UNIX and Linux Forum Topics You Might Find Helpful
Thread Thread Starter Forum Replies Last Post
how i can make one ip access to ftp account and deny others elkadrey Shell Programming and Scripting 1 09-28-2009 09:43 AM
Restrict access to specific users. nua7 UNIX for Advanced & Expert Users 6 08-27-2008 02:17 AM
how to deny ftp access skully Solaris 10 06-17-2008 09:40 PM
how to deny someone to use ftp command ? yarx IP Networking 4 12-03-2007 11:46 PM
Deny dba command to a user group!! masquerer UNIX for Dummies Questions & Answers 3 06-20-2007 10:58 AM



All times are GMT -4. The time now is 10:41 PM.