Honouring eXecute permissions on NT?

[Mayers, Philip J]

But it's not hard for them to store the binaries on the network, and copy
them to the local machine TEMP directory at login, and run them from there.
I did just that very thing as a (naughty) undergraduate here at Imperial, to
get around the execute permissions thing...

I've just tried using Samba's "Security" support (network permission
setting) and NT doesn't seem to honour the execute ACL bit on that share.
Even if it did, the user will be listed as the file's owner, and can change
the permissions back at will. I understand what you're trying to do, but I
can't see a way of doing it.

That said - why doesn't NT honour the execute permission bit on 2.0.7 Samba
shares?

Regards,
Phil

+----------------------------------+
| Phil Mayers, Network Support     |
| Centre for Computing Services    |
| Imperial College                 |
+----------------------------------+  

-----Original Message-----
From: swright at sls.bc.ca [mailto:swright at sls.bc.ca]
Sent: 02 November 2000 16:54
To: 'samba-ntdom at samba.org'
Subject: RE: Honouring eXecute permissions on NT?


On 2 Nov 2000, at 15:55, Mayers, Philip J wrote:

> You're going about it the wrong way - "execute" permissions don't make
sense
> in NT. If you don't want them to execute the file, deny them read
> permission, not execute. Ideally, put them in a seperate directory and
deny
> them read permission on the directory (and execute, which equates to
> traverse).
> 

We don't have this option. The network shares are for personal file storage.

The idea is to prevent students from executing programs they download and 
store on the network. I'm aware that removing R permissions will work where 
required, but it won't work in this situation. It works fine with NT, and
I'm 
hoping to get the same function with Samba if possible.


========================
Shawn Wright
Computer Systems Manager
Shawnigan Lake School
http://www.sls.bc.ca
swright at sls.bc.ca