we want to allow user to FTP files into a directory, and then the program (PLSQL) will read and process the file, and then move the file to other directory for archiving.
the user id: uftp1, group: ftp
the program run in oracle database, thus have the user Id: oraprod, group: dba
how to configure the directory so that the directory, and all subsequences files FTP by user are both read-able and write-able by both user id: (uftp1, and oraprod) ?
you may think to put user oraprod in ftp group as secondary group, then make the content of the directory where ftp-ed files are stores r/w for ftp group (you meay also think to create a new group, to which both users belong, and assign r/w privs to this group in the said directory).
Should be able to use usermod -G to assign users to additional groups (check man pages anyway).
Making the user uftp1 a member of dba or oraprod a member of ftp may lead to security hole as either way will open the door for the uftp1 or the oraprod user to have access to the resources which ftp or dba is the owner of.
Creating a separate group for uftp1 and oraprod is a better approach.
But the best approach in terms of security in this scenario would be to make use of ACL and SGID bit. I will explain the approach here:
1. Suppose /u01 is the directory in question. Make oraprod and dba are the owner of the directory:
2. Give 770 permission on /u01:
3. Turn on SGID bit on /u01 so that when the uftp1 user creates any file in the directory the group owner of the directory (dba) will have the ownership of the newly created file by default rather than ftp. This will help the oraprod user to have permission on the file as it's a member of the group.
4. Now you have to set ACL for the user uftp1 on /u01. The syntax varies depending on whether it's a ZFS or UFS filesystem.
For ZFS:
For UFS:
That's it and you are all setup.
Hi,
I have created a shared directory on /home, where all users on a certain group have read, write and execute permissions.
I did this using
chmod -R g+rwx /home/shared/
The problem is, when a particular user creates a directory within /home/shared, other users are not able to write to... (8 Replies)
Hi,
I had a newbie question on giving permissions to directories and subdirectories.
I am one of the users in a group. The top level directory (say directory 'X' - owned by someone else) has the following permissions:
drwxrwxrwx
It also has a subdirectory, say 'Y', (which in turn has... (5 Replies)
i have an application that writes to a directory. let's call the directory:
/var/app/
the permissions of this directory is:
drwxrwxr-x
Now the files that the application creates in this directory usually dont have read permissions for others.
i know there's something called... (3 Replies)
Hi,
How do i check if I have read/write/execute rights on a UNIX directory?
What I'm doing is checking read access on the files but i also want to check if user has rights on the direcory in whcih these files are present.
if then......
And I check if the directory exists by using... (6 Replies)
Hello,
I've configured an user authentication against Active Directory (Windows Server 2008 R2) on AIX V6 with LDAP. It works fine.
And here's my problem:
How can I control ldap user permissions on the local AIX machine?
E.g. an AD user should be able to write all files of local sys... (1 Reply)
Hi all.
Only one of the following makes any kind of sense as a possible permission field for a UNIX file. Which one?
--w-------
----rwxrwx
-r--------
--rwx-----
----r-----
I think it is no. 3. I dont think it would be 2, because why would you want to give groups and... (1 Reply)
Hi All
I am using cygwin and if i type ls -l it is giving like
drwxr-xr-x+ for directories.
My question is what is the meaning of '+' sign at the end?
its not giving that '+' sign for files.
Thank you (1 Reply)
My users home directory located in a RHEL 5.0 nfs server.
Client is ubuntu 8.1 using NIS for authntication anf NFS for automounting
home Directory on the client side.
I set 700 to the users home directory.
My problem here is some of the users change the mode, which result in leak of... (2 Replies)
From within a directory, how do I determine whether I have write permission for it.
test -w pwd ; echo ?
This doesn't work as it returns false, even though I have write permission. (4 Replies)