Visit Our UNIX and Linux User Community


File and Dir permissions


 
Thread Tools Search this Thread
Top Forums UNIX for Dummies Questions & Answers File and Dir permissions
# 8  
Old 04-18-2002
Yes...there are a three individuals that will have access to this server. Which is exactly the reason that i would like to perform this alteration. I guess i'm just a very cautious individual. people can do things( however un-intentional)...that can really screw it up. I've done it myself.

As for the chmod command, I already know how to use it. Which is shown by the fact that i changed the previous dir to 644. I have already reduced the services down to an minimum.
I have utilized the Deception Toolkit. Set various cron jobs to check system file integrity, password strength, /tmp directory alterations, alteration of number of SUID/SGID files, fingerprint of OS ports, etc......

I don't think that i really need to change anything else then the permissions to keep authenticated users from making a devastating mistake to my system.

I have been allowing some good friends...check out the Linux OS. My contribution to the advocation of all the *nix OS'. Smilie

Last edited by thomas.jones; 04-18-2002 at 10:31 PM..
# 9  
Old 04-19-2002
For the most part, most distributions should be fairly sane with their permissions. By default, the worst a user should be able to do is wreck their own stuff.
I can say though, that you might consider adding something like:
umask 027
to the /etc/profile if any of you are using bash/sh/ksh (bash is usually the default on a Linux system). This will default the creatoin of their new file to be read-write for themselves, readable only by other group members, and locked out by everyone else.

And don't give them root access!
If you use sudo, make sure it's set up correctly.

Edit: corrected some spelling

Last edited by LivinFree; 04-19-2002 at 10:37 AM..
# 10  
Old 04-19-2002
Backup policy required.

Thanks LivinFree for deleting that post about the rm command.

Are these guys friends of yours? Guess not...

If you are really this paranoid about your users, I would suggest you get some kind of backup policy in place. And a worst case recovery policy.

If these users are as incompentent as you believe, you MUST have a Backup Schedule. At least perform a tar of the root filesystem and important directories. I would also suggest, if you can do it, burn a copy of your system to CD. After you get it the way you want it. If you have a backup program, that would be great.

As a 5 year admin, I can tell you I have never had a users screw up one of my boxes, of course I could just be lucky.

I have done more damage myself than my users ever did. Nothing serious, but I caused some downtime at work a few times.

Last edited by Kelam_Magnus; 04-19-2002 at 10:03 AM..
# 11  
Old 04-19-2002
walk into http://www.cert.org

find checklist's (can help you), get funny, and learn.
# 12  
Old 04-19-2002
I didn't delete any post, but I'm sure glad someone did it for me Smilie
 

Previous Thread | Next Thread
Test Your Knowledge in Computers #949
Difficulty: Medium
In computer security, term virus and malware refer to the exact same thing.
True or False?

10 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

Help- writing to dir with no write permissions (script)

hello, I have a question regarding the below script.. I just simply trying to write to a file in directory that does not have write permissions but this is failing .. it still writes to it regardless .. Many thanks in advance.. #!/bin/bash #check if dir exists, if so write to it ... (5 Replies)
Discussion started by: Reb0rn
5 Replies

2. Shell Programming and Scripting

Create file Dir and Sub Dir same time

Hi Guys , I want create files Dire and Sub Dire. as same time using variable. EX: x1="/hk/Pt/put/NC/R1.txt" x2="/hk/pt/Put/Ot/NC/RN.txt" And i want delete all after done with my script. Thanks (2 Replies)
Discussion started by: pareshkp
2 Replies

3. Shell Programming and Scripting

Have files take on DIR permissions

Hello all; I have a question based on a ticket I have from a user... K...first some background...this client needed a generic user setup to allow them to ftp files; user is called "msifpt"...so here's what they want to do now with this account: 1. Client will use the user id ‘msiftp'... (1 Reply)
Discussion started by: gvolpini
1 Replies

4. UNIX for Dummies Questions & Answers

How to list all files in dir and sub-dir's recursively along with file size?

I am very new to unix as well as shell scripting. I have to write a script for the following requirement. In have to list all the files in directory and its sub directories along with file path and size of the file Please help me in this regard and many thanks in advance. (3 Replies)
Discussion started by: nmakkena
3 Replies

5. Shell Programming and Scripting

Dir permissions

Hi All, I have a script which will be run by another user say user 2 which will create a new dir say dir 4 in my work place and copy certains files from his dir. /t1/t2/t3/dir4 I want to allow the user to create the dir dir4 and copy the files,but bring the control back to my name say user... (2 Replies)
Discussion started by: prasperl
2 Replies

6. UNIX for Dummies Questions & Answers

Creating a File system with required permissions for all DIR's created in

Hello All, I am application admin. I need to clear all the temporary files cleared by the applications. I need help/suggestion that is there any way to create a file system such that every Dir created in by any user will have 775 permissions. So, that i can simply clear the temporary file which... (6 Replies)
Discussion started by: firestar
6 Replies

7. UNIX for Dummies Questions & Answers

Copying dir (and sub dir) file names from ftp server to txt file in diff server

Hey all, i want to copy only the file names from an ftp server (directory and all sub directory) to a text file in another server (non ftp), i.e. i want to recursively move through directories and copy only the names to a text file. any help is appreciated...thank you in advance (1 Reply)
Discussion started by: deking
1 Replies

8. Shell Programming and Scripting

Moving file(s) from dir to dir

Hi, I am fairly new to writing scripts. I am trying to write a script that moves either One or All of the files from one directory to another. I know how to make the actual command to do it, but i don't quite know how to add operators to it, ie -i or -a. I want -i to move one file from... (4 Replies)
Discussion started by: SirJoeh
4 Replies

9. Shell Programming and Scripting

Shell Script to save/restore files and dir permissions

Hello all: I need found script to save and restore file permissions and owner:group... this is for backup my server... I have one problem in my server and file permissions and owner:group, mess up.. For this reason i need found one way to secure this aspect of the server... Thanks! (1 Reply)
Discussion started by: joangopan
1 Replies

10. Shell Programming and Scripting

copying a file from one dir to another dir

hi i have a script compareFiles() { find /tmp/Satya -type f | \ while read filename1 do echo "----------------------------------------$filename1" find /tmp/Satya -type f | \ while read filename2 do if diff $filename1 $filename2 then echo "Both files... (3 Replies)
Discussion started by: Satyak
3 Replies

Featured Tech Videos