brent saner via plug on 2 Jan 2025 11:37:27 -0800


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] Setting proper user and group permissions on a directory


On Thu, Jan 2, 2025, 11:33 Mike Leone via plug <plug@lists.phillylinux.org> wrote:

(be kind, it's been years since I had to do any day-to-day Linux administration ...)

I will have a set of vendors who will be uploading (sftp) files to us on our DMZ. I want each vendor to have ownership and full permissions into only their own folder (obviously), but I want our employee to have access rights into each of those folders (so they can sftp the files out of there and into the protected LAN).

SO what I am planning is something like this:
(SNIP)

I'd actually just do this with POSIX ACLs. Set a default on the parent dir's ACL (setfacl -d) for the employee group with rwx (or rx, etc.) (so `setfacl -d --set g:staff_group:rwx /path/to/sftpdir`).

Ta-da. Applies to new directories recursively automatically.
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug