About Directory and File Read and Write Rights

Dear all,

   In is possible have a directory that allow all group member Read and Write, but can delete this directory by group member.
  For example : There have a directory call "Company Excel File". All members in "EXCEL" group can read and write in "Company Excel File" directory, but not allow delete "Company Excel File" directory, how can I do it. I use redhat 9.
   Thanks for you help !

Tommy

LVL 1
tommyliuAsked:
Who is Participating?
 
xberryConnect With a Mentor Commented:
Hi tommy,

login as root

mkdir /Company_Excel_File directly under / or any other directory that can only be accessed & manipulated by the Systemadministrator, for instance /opt. In any case make sure that parent directories of your directory is group & owner 'root' only.
Also the directory 'Company_Excel_File' should have owner & group "root", only.
Elsewise do chgrp and chown root Company_Excel_File.
Then:
# chmod 775 /Company_Excel_File              or: chmod 775 /(your path)
# chmod -R 777 /Company_Excel_File/*        or: chmod -R 777 /(your path)/*
# chgrp -R EXCEL /Company_Excel_File/*     or: chgrp - R EXCEL /(your path)/*





0
 
bloemkool1980Commented:
yes you do

chmod 740 directory
but on the files you do chmod 750
this means they can read the directory and changes the files in the directory.

http://mason.gmu.edu/~montecin/UNIXpermiss.htm this is a good document on file perms on unix/linux.

To make it clear to change a file you do not have to give write access on the directory permissions :)
0
 
bloemkool1980Commented:
I am wrong 4 is read 5 is read execute 6 is read write 7 is all
So it should be 760 on the files instead of 750. If they need to execute it should be 770.

0
Protect Your Employees from Wi-Fi Threats

As Wi-Fi growth and popularity continues to climb, not everyone understands the risks that come with connecting to public Wi-Fi or even offering Wi-Fi to employees, visitors and guests. Download the resource kit to make sure your safe wherever business takes you!

 
tommyliuAuthor Commented:
Dear bloemkool1980,
   It is impossible for my case. It is because directory chmod 770, the group user can delete the directory.

Tommy
0
 
bloemkool1980Commented:
I can understand your directory has that rights but is it needed and if so then you cannot do a lot.
0
 
Alf666Commented:
Let's assume you have the following :

Directory dirs
containing directory excelfiles
containing files

dirs has to be mode 750 (everybody in the group can go there, list directories and files, but not modify the directory content).
excelfiles has to be 770 (everybody in the group can go there, list directories and files, add files, remove files).

This means that, NO, owners and group can not delete a directory based on it's own access rights.
To delete a directory, the parent directory must bear rights allowing users to modify it's own structure.
The reason for that is that deleting a directory (or a file) means affecting the structure of the parent directory (because you modify it's content).
So the one that has to be protected is the parent.

Is that clear ?
0
 
bloemkool1980Commented:
That is what I said and it seems he would like to have 770 on the directory so then ofcourse you cannot protect the directory from being deleted.
0
 
Alf666Commented:
I'm sorry, but, yes, you can.
Just have the parent directory not in mode 770. Looks like that's the author is looking for.
0
 
bloemkool1980Commented:
I you like to have your directory in 770 you cannot do what he tells duhuh
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.