Honouring eXecute permissions on NT?

Mayers, Philip J p.mayers at ic.ac.uk
Fri Nov 3 09:55:55 GMT 2000

But it's not hard for them to store the binaries on the network, and copy
them to the local machine TEMP directory at login, and run them from there.
I did just that very thing as a (naughty) undergraduate here at Imperial, to
get around the execute permissions thing...

I've just tried using Samba's "Security" support (network permission
setting) and NT doesn't seem to honour the execute ACL bit on that share.
Even if it did, the user will be listed as the file's owner, and can change
the permissions back at will. I understand what you're trying to do, but I
can't see a way of doing it.

That said - why doesn't NT honour the execute permission bit on 2.0.7 Samba


| Phil Mayers, Network Support     |
| Centre for Computing Services    |
| Imperial College                 |

-----Original Message-----
From: swright at sls.bc.ca [mailto:swright at sls.bc.ca]
Sent: 02 November 2000 16:54
To: 'samba-ntdom at samba.org'
Subject: RE: Honouring eXecute permissions on NT?

On 2 Nov 2000, at 15:55, Mayers, Philip J wrote:

> You're going about it the wrong way - "execute" permissions don't make
> in NT. If you don't want them to execute the file, deny them read
> permission, not execute. Ideally, put them in a seperate directory and
> them read permission on the directory (and execute, which equates to
> traverse).

We don't have this option. The network shares are for personal file storage.

The idea is to prevent students from executing programs they download and 
store on the network. I'm aware that removing R permissions will work where 
required, but it won't work in this situation. It works fine with NT, and
hoping to get the same function with Samba if possible.

Shawn Wright
Computer Systems Manager
Shawnigan Lake School
swright at sls.bc.ca

More information about the samba-ntdom mailing list