Re: [gentoo-user] OT: Filesystem permissions

[Alan McKinnon <alan.mckinnon@gmail.com>]

On Friday 04 July 2008, Florian Philipp wrote:
> Hmm, good point. I will monitor the situation.
> If there are any occurrences of wrong permissions, I think it will be
> sufficient to make an if-clause before setting the umask but maybe it
> proves unneccessary.

I think what you really want in this case is to set the umask to 0007 
for human users and leave it as is for system users. You could either 
check for UID > 1000 in /etc/profile, or explicitly add the umask 
setting to each existing user's .bashrc. Also add it to /etc/skel to 
enable it for any new users in the future.

Which is starting to get more complex than a simple acl :-)

Experience has taught me that these general principles apply to Unix 
permissions pretty much always: 

- the normal /user/group/rwx scheme works just fine 99% of the time
- 1% of the time you have an unusual need that the above doesn't cater 
for, but a simple unobtrusive acl does. These cases are usually 
obvious.
- if you are using acl's a lot, there's probably something wrong with 
your permission scheme

-- 
Alan McKinnon
alan dot mckinnon at gmail dot com

-- 
gentoo-user@lists.gentoo.org mailing list