• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 304
  • Last Modified:

About Directory and File Read and Write Rights

Dear all,

   In is possible have a directory that allow all group member Read and Write, but can delete this directory by group member.
  For example : There have a directory call "Company Excel File". All members in "EXCEL" group can read and write in "Company Excel File" directory, but not allow delete "Company Excel File" directory, how can I do it. I use redhat 9.
   Thanks for you help !


1 Solution
yes you do

chmod 740 directory
but on the files you do chmod 750
this means they can read the directory and changes the files in the directory.

http://mason.gmu.edu/~montecin/UNIXpermiss.htm this is a good document on file perms on unix/linux.

To make it clear to change a file you do not have to give write access on the directory permissions :)
I am wrong 4 is read 5 is read execute 6 is read write 7 is all
So it should be 760 on the files instead of 750. If they need to execute it should be 770.

tommyliuAuthor Commented:
Dear bloemkool1980,
   It is impossible for my case. It is because directory chmod 770, the group user can delete the directory.

We Need Your Input!

WatchGuard is currently running a beta program for our new macOS Host Sensor for our Threat Detection and Response service. We're looking for more macOS users to help provide insight and feedback to help us make the product even better. Please sign up for our beta program today!

I can understand your directory has that rights but is it needed and if so then you cannot do a lot.
Let's assume you have the following :

Directory dirs
containing directory excelfiles
containing files

dirs has to be mode 750 (everybody in the group can go there, list directories and files, but not modify the directory content).
excelfiles has to be 770 (everybody in the group can go there, list directories and files, add files, remove files).

This means that, NO, owners and group can not delete a directory based on it's own access rights.
To delete a directory, the parent directory must bear rights allowing users to modify it's own structure.
The reason for that is that deleting a directory (or a file) means affecting the structure of the parent directory (because you modify it's content).
So the one that has to be protected is the parent.

Is that clear ?
That is what I said and it seems he would like to have 770 on the directory so then ofcourse you cannot protect the directory from being deleted.
I'm sorry, but, yes, you can.
Just have the parent directory not in mode 770. Looks like that's the author is looking for.
I you like to have your directory in 770 you cannot do what he tells duhuh
Hi tommy,

login as root

mkdir /Company_Excel_File directly under / or any other directory that can only be accessed & manipulated by the Systemadministrator, for instance /opt. In any case make sure that parent directories of your directory is group & owner 'root' only.
Also the directory 'Company_Excel_File' should have owner & group "root", only.
Elsewise do chgrp and chown root Company_Excel_File.
# chmod 775 /Company_Excel_File              or: chmod 775 /(your path)
# chmod -R 777 /Company_Excel_File/*        or: chmod -R 777 /(your path)/*
# chgrp -R EXCEL /Company_Excel_File/*     or: chgrp - R EXCEL /(your path)/*

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now