• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 303
  • Last Modified:

About Directory and File Read and Write Rights

Dear all,

   In is possible have a directory that allow all group member Read and Write, but can delete this directory by group member.
  For example : There have a directory call "Company Excel File". All members in "EXCEL" group can read and write in "Company Excel File" directory, but not allow delete "Company Excel File" directory, how can I do it. I use redhat 9.
   Thanks for you help !

Tommy

0
tommyliu
Asked:
tommyliu
1 Solution
 
bloemkool1980Commented:
yes you do

chmod 740 directory
but on the files you do chmod 750
this means they can read the directory and changes the files in the directory.

http://mason.gmu.edu/~montecin/UNIXpermiss.htm this is a good document on file perms on unix/linux.

To make it clear to change a file you do not have to give write access on the directory permissions :)
0
 
bloemkool1980Commented:
I am wrong 4 is read 5 is read execute 6 is read write 7 is all
So it should be 760 on the files instead of 750. If they need to execute it should be 770.

0
 
tommyliuAuthor Commented:
Dear bloemkool1980,
   It is impossible for my case. It is because directory chmod 770, the group user can delete the directory.

Tommy
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
bloemkool1980Commented:
I can understand your directory has that rights but is it needed and if so then you cannot do a lot.
0
 
Alf666Commented:
Let's assume you have the following :

Directory dirs
containing directory excelfiles
containing files

dirs has to be mode 750 (everybody in the group can go there, list directories and files, but not modify the directory content).
excelfiles has to be 770 (everybody in the group can go there, list directories and files, add files, remove files).

This means that, NO, owners and group can not delete a directory based on it's own access rights.
To delete a directory, the parent directory must bear rights allowing users to modify it's own structure.
The reason for that is that deleting a directory (or a file) means affecting the structure of the parent directory (because you modify it's content).
So the one that has to be protected is the parent.

Is that clear ?
0
 
bloemkool1980Commented:
That is what I said and it seems he would like to have 770 on the directory so then ofcourse you cannot protect the directory from being deleted.
0
 
Alf666Commented:
I'm sorry, but, yes, you can.
Just have the parent directory not in mode 770. Looks like that's the author is looking for.
0
 
bloemkool1980Commented:
I you like to have your directory in 770 you cannot do what he tells duhuh
0
 
xberryCommented:
Hi tommy,

login as root

mkdir /Company_Excel_File directly under / or any other directory that can only be accessed & manipulated by the Systemadministrator, for instance /opt. In any case make sure that parent directories of your directory is group & owner 'root' only.
Also the directory 'Company_Excel_File' should have owner & group "root", only.
Elsewise do chgrp and chown root Company_Excel_File.
Then:
# chmod 775 /Company_Excel_File              or: chmod 775 /(your path)
# chmod -R 777 /Company_Excel_File/*        or: chmod -R 777 /(your path)/*
# chgrp -R EXCEL /Company_Excel_File/*     or: chgrp - R EXCEL /(your path)/*





0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now