Directory Permissions

Mikkel L. Ellertson mikkel at execpc.com
Fri Jun 11 22:41:28 GMT 1999


At 07:32 AM 6/11/1999 +1000, you wrote:
>
>
>I have set up several shares which our staff will have access to.  They
>are central repositories where we will be storing things like documents
>and drivers, etc.  I would like to allow staff to add items into the
>shares, but to now be able to remove anything (Except maybe what they put
>in..)
>
>I have created a share called drivers:
>
>[drivers]
>       comment                 = General Hardware Drivers
>        path                    = /data/samba/shares/drivers
>        browsable               = yes 
>        writable                = yes
>        valid users             = @staff
>        force create mode       = 0750
>        force directory mode    = 0770
>
>This way if a user creates a directory, it is group writable so that
>anyone can drop stuff into it.  The problem arises when another user
>decides to remove items in that directory that aren't his or hers.
>
>Is it possible to stop users from being able to delete anything, yet still
>allow them to create?  
>
>Thanks.
>
>--
>Mike Oswell
>Xcert International Inc
>
You could set the "sticky bit" for the directory.  Then users can only
delete files they create.

[drivers]
       comment                 = General Hardware Drivers
        path                    = /data/samba/shares/drivers
        browsable               = yes 
        writable                = yes
        valid users             = @staff
        force create mode       = 1750
        force directory mode    = 1770

Mikkel

---
    Do not meddle in the affairs of dragons,
 for you are crunchy and taste good with ketchup.



More information about the samba mailing list