02-17-2008
You could create a special program to create these files. The program would be suid to the user who is the desired owner of the files. Then to enforce use of this program, you could make the directory writable only by the desired owner.
10 More Discussions You Might Find Interesting
1. UNIX for Dummies Questions & Answers
Just as the subject asks :) Thanks!
hellz (2 Replies)
Discussion started by: hellz
2 Replies
2. Solaris
I have a truble with NFS mount.
When i mount remote dir, then all permissions changes!
For example:
# mkdir /data
# mount 10.1.1.100:/var/data /data
# ls -l /data
drwxr-xr-x 7 nobody nobody 5632 Oct 22 14:55 file1
drwxr-xr-x 4 nobody nobody 512 Oct 22 14:55... (4 Replies)
Discussion started by: jess_t03
4 Replies
3. Shell Programming and Scripting
Dear Folks :-)
I want to rsync some files between some servers and preserve files owner and group (not UID or GID), in some machines UID and GID are differents, for example:
a) In the rsync server:
# stat vbseo.php
File: `vbseo.php'
Size: 26758 Blocks: 56 IO... (1 Reply)
Discussion started by: Santi
1 Replies
4. UNIX for Dummies Questions & Answers
Hi,
out of curosity this question just popped in my mind. Is there any way to find out the uid and gid of the running process ?
If i do a ls -l of a program then it shows the uid/gid bit (if its set). I want to see as which user/group the program is running ..... is there any way to know this... (2 Replies)
Discussion started by: ankurjain
2 Replies
5. UNIX for Advanced & Expert Users
I´m listing the contents of a directory using the command
ls -lI get numeric uid and gid for some lines.
example:
drwxr-xr-x root root 1970-01-01 01:00 sys
-rw-r--r-- 501 20 0 2010-08-04 14:54 shutdown.bravo.rc
drwxr-x--- 501 20 ... (5 Replies)
Discussion started by: flocki
5 Replies
6. Shell Programming and Scripting
Hi,
I am new to scrippting need little help, I would like to change uid, gid of exisisting user,
example
User A current uid=1,gid=2 would like to change uid=4,gid=5
I know the command to change uid,gid but after changing I have to change permissions on folders also which are belonging... (3 Replies)
Discussion started by: manoj.solaris
3 Replies
7. UNIX for Dummies Questions & Answers
Present
/home/dsadm# id dsadm
uid=0(root) gid=0(root)
----------------------------------
needs to be
/home/dsadm> id dsadm
uid=23186(dsadm) gid=16284(gdstage)
Please provide the command/steps for the above uid, gid value change
Thanks in advance for all your support .
... (3 Replies)
Discussion started by: sridhardwh
3 Replies
8. AIX
Hi Everyone,
We are encountering the following issue on AIX 5.3. When we do ls -ltr the list displays only user id and group id instead of user name and group name.
This is happening for all users except root. Whe we do ls -ltr with root user it shows perfectly fine.
When we searched... (25 Replies)
Discussion started by: madhav.kunapa
25 Replies
9. Homework & Coursework Questions
I would like to get an opinion for my solution for this task and get feedback about better approach or mistakes I have made.
1. The problem statement, all variables and given/known data:
The task is to create a script which prints information about users whose names are specified in the... (2 Replies)
Discussion started by: kornfan
2 Replies
10. Shell Programming and Scripting
OK, so simple question here:
Is there anyway to REMAP, while extracting with tar, specific uid's and gid's on extracted files ?
Background: The usual transfer between two servers with same literals username's names, but with different gid and uid. I would like, for example, files owned by... (6 Replies)
Discussion started by: fidodido
6 Replies
files(4) Kernel Interfaces Manual files(4)
NAME
files - File control database (Enhanced Security)
DESCRIPTION
The file control database (/etc/auth/system/files) is designed to help the Information System Security Officer (ISSO) maintain the
integrity of the system. The database contains entries for system data files and executable files that require certain attributes. Some
files require certain attributes to provide protection against unauthorized access, while others require a specific set of attributes to
accomplish their intended function.
The database is used by the library routine create_file_securely() to determine the set of attributes for a newly created file. Many pro-
grams associated with the trusted computing base (TCB) use this library routine for file creation to ensure that file attributes are set
correctly.
A broad range of attributes can be specified in the file control database. Specific choices depend upon the exact system configuration.
These choices are as follows: This field specifies the owner name for the entry. If an owner name is not specified and the entry is created
using create_file_securely, the owner of the file will be the real user ID of the process creating the file. This field specifies the
group name for the entry. If a group name is not specified and the entry is created using create_file_securely, the group of the file will
be the real group ID of the process creating the file. This field specifies the mode word for the entry. If the mode word is not specified
and create_file_securely is used to create the entry, a mode word of 0 (zero) is assigned to the new file. This field identifies the type
of the entry. This field is not taken into account by create_file_securely when a file is being created. The library routine will only
create regular files. Choices for the type field are as follows: Regular file Directory FIFO device (pipe) Character special device Block
special device Socket
EXAMPLES
The following example is a typical file control database entry for the program /sbin/newfs: /sbin/newfs:f_owner=root:f_group=bin:
:f_type=r:f_mode#04111:
:chkent: This entry specifies that the newfs program has bin as its owner and group, that it is a regular file, and that its mode
is 0111
The following example shows an entry for a site-specific directory that contains help files for an application:
/appl/help_files:f_owner=appadmin:f_group=appl: :f_type=d:f_mode#0750: :chkent; This entry specifies the owner of the
/appl/help_files directory as appadmin, the group as appl, and the mode as 0750.
FILES
Specifies the pathname of the file control database.
RELATED INFORMATION
Functions: getprfient(3)
Files: authcap(4) delim off
files(4)