Needs help with File Permissions on NT

[Stephen Langasek]

On Wed, 24 Nov 1999, Edan Idzerda wrote:

> > on Solaris they have 701 on their homedirs
> > drwx-----x  on /home/myhomedir.
> > 
> > Can someone please help regrading it. We don't want student to change permission on their home directories so how to get rid of security tab in new version of samba.

> Do you mean that you don't want them to change it accidentally 
> through NT or you don't want them to change it at all?

> [homes]
>   postexec = chmod 701 %H

> would do the trick if you just want to enforce it via Samba.
> I think that--sometimes--a hack is an "industry best practice."
> Or "the simplest answer is sometimes the best."

This is a bad idea. Using chmod in a postexec means that there is a period
of time, however short it may be, between the moment the user messes up the
directory permissions and the moment they're changed back by your hack, when
the user's homedir will be vulnerable.

-Steve Langasek
postmodern programmer