UNIX for Dummies Questions & Answers

I've been working with Solaris/Linux for about 4 months now. Let me explain the scenario. There will be two users involved. The owner (curOwner) and the new user (newUser). The server in question is a Solaris 10 box.

So curOwner runs an application that is constantly writing logs to lets say.

Code:

/opt/apps/log

In the directory exists various logs of all sorts. All owned by curOwner. The application is constantly writing logs to the directory so it's important that none of curOwners rights are disturbed.

I need newUser to have the ability to "rwx" all current and future files under opt/apps/log directory(and ONLY the 'log'" directory). From what i understand there are multiple entries i have to make using the find command and setfacls. I'm struggling with getting it to take the setfacls command in conjunction with find.

Code:

find log -type f -exec setfacl -s u::rw-,g::r--,o:r--,g::rw-,m:rw- {} \;

find log -type d -exec setfacl -s u::rwx,g::r-x,o:r-x,m:rwx,d:u::rwx,d:g::r-x,d:o:r-x,d:m:rwx {} \;

find log -type d -exec setfacl -m group::rwx,d:g::rwx {} \;

From what i understand i need to run these three lines in conjunction to first set the dir and file access lists. Then make the files under the directory always inherit the proper rights. Yet i can't seem to dicipher what i'd need to do in order to make only newUser have the appropriate rights without disrupting curOwner. Can anyone help?

---------- Post updated at 08:35 PM ---------- Previous update was at 05:21 PM ----------

Did i frame this question incorrectly? Are there alternatives from using facls? Any input would be great.

Can you create a new group to add both curOwner and newUser in it?

When curOwner create a new log, default permission will be 664. So both accounts can read and update the log files.

But the thing confused me is, why you need other accounts to update log files? Read-only permission is not enought?

newUser will be deleting Old logs after moving them.

---------- Post updated at 09:57 AM ---------- Previous update was at 07:58 AM ----------

Figured it out. Can't believe i didn't see it. Say newUser is in group newUser.

Code:

find log -type f -exec setfacl -s u::rw-,g::r--,o:r--,g:newUser:rwx,m:rw- {} \;
find log -type d -exec setfacl -s u::rwx,g::r-x,o:r-x,m:rwx,d:u::rwx,d:g::r-x,d:o:r-x,d:m:rwx {} \;
find log -type d -exec setfacl -m group:newUser:rwx,d:g:newUser:rwx {} \;