Honouring eXecute permissions on NT?

[swright at sls.bc.ca]

On 3 Nov 2000, at 9:55, Mayers, Philip J wrote:

> But it's not hard for them to store the binaries on the network, and copy
> them to the local machine TEMP directory at login, and run them from there.
> I did just that very thing as a (naughty) undergraduate here at Imperial, to
> get around the execute permissions thing...

That just means your NT admins haven't sufficiently secured the machine. I 
assure you this will not work here. There is nowhere on the local drive that a 
user can create a file with eXecute permissions under on our locked down 
NT install.
 
> I've just tried using Samba's "Security" support (network permission
> setting) and NT doesn't seem to honour the execute ACL bit on that share.
> Even if it did, the user will be listed as the file's owner, and can change
> the permissions back at will. I understand what you're trying to do, but I
> can't see a way of doing it.

Under NT, this appears to be a loophole - you can remove the Set 
Permissions flag for a file owner, but the owner can still change the 
permissions. However, removing access to the security dialog makes this a 
bit tougher to work around.
 
> That said - why doesn't NT honour the execute permission bit on 2.0.7 Samba
> shares?

Not sure what you mean here - I'm running 2.06.
========================
Shawn Wright
Computer Systems Manager
Shawnigan Lake School
http://www.sls.bc.ca
swright at sls.bc.ca