Novell OPEN ENTERPRISE SERVER 2 SP2 - ADMINISTRATION, Руководство по внедрению, Страница: 197 / 288

File Services 197
n
ov
do
cx (e
n)
22
Ju
n
e 20
09
The reason for checking directories is that in the parent directories the directory owners are
“other” users and they need to be able to see the path down to their own private directories.
Because r-x is the default for most directories on Linux, you probably won’t need to change the
permissions.
17.4.3 Providing a Group Work Area
On an NCP volume, you can provide a group work area by assigning users to a group and then
granting the group trustee rights to the directory. As an alternative, if users need different levels of
access within the work area, you can assign each user as a trustee and grant only the rights needed.
To provide a group work area on a Linux POSIX volume:
1 Use the
chown
command to set group ownership for the directory. For example, you could enter
chown -R : group / path / group_dir
where group is the group name, path is the file path to the work area, and group_dir is the
group work directory. The
-R
option applies the action to all subdirectories and files in
group_dir.
2 Grant the group read, write, and execute rights (. . . rwx . . .). (Owner and other permissions are
represented by dots because their settings are irrelevant.)
For example, you could enter
chmod -R 770 / path / group_dir
where path is the file path to the work area, and group_dir is the group work directory. The
second 7 grants rwx to the group. (The example assumes that the owner of the directory should
also retain all rights. Therefore, the first number is also 7.)
3 Check each parent directory in the path up to the
root (/)
directory, making sure that the
group has read and execute rights (r-x) in each directory as shown by the second group of
permissions ( . . . r-x . . .).
Use the
chmod
command to adjust this where necessary by specifying the number 5 for the
group permission. For more information, see “ Section 17.4.1, “Managing Access Rights,” on
page 195 .”
17.4.4 Providing a Public Work Area
On an NCP volume, you can provide a public work area by assigning [Public] as a trustee and then
granting the required trustee rights to the directory.
For the work area itself, you would set permissions for the owner, group, and all others to read,
write, and execute rights (rwx rwx rwx) (
chmod 777
).
All others must also have read and execute rights on the system in each parent directory in the path
all the way to the root of the Linux system. This means that you set permissions for all parent
directories to rwx --- r-x.
To provide a public work area on a Linux POSIX volume:
1
Use the
chown
command to assign all rights (rwx) to other (all users). For example, you could
enter
chmod -R 707 / path / group_dir