well the whole point of the first post was to control access to a file, without controlling the directory and thats what i am saying is not possible. unless the root owns the guests home directory, (as u pointed out) controlling individual files won't help. Also giving certain dirs write persmissions could not work under circumstances. e.g mozilla , one may want to give write perm to the guest so that mozilla can store temp. files. but one may not want the user to install mozilla ad-ons like skins, plug-ins etc. since mozilla stores all under.mozilla , u have a problem.
I would much rather have a HP/UX like ACL functionality on top of normal unix permissions. if my first post gave the impression that i was favouring windoze a thousand appologies
u can't lock files in unix unless u lock the directory containing those files.
remember u don't need write permission on a file to delete it.
all it takes is write permission on the directory containing the file.
so a user can very well delete the file and put a new one with his pref.
removing write permissions on the home directory would prevent some applications from running.
well the whole point of the first post was to control access to a file, without controlling the .mozilla , u have a problem.
directory and thats what i am saying is not possible.
unless the root owns the guests home directory, (as u pointed out) controlling individual files
won't help.
Also giving certain dirs write persmissions could not work under circumstances.
e.g mozilla , one may want to give write perm to the guest so that mozilla can store temp. files.
but one may not want the user to install mozilla ad-ons like skins, plug-ins etc.
since mozilla stores all under
I would much rather have a HP/UX like ACL functionality on top of normal unix permissions.
if my first post gave the impression that i was favouring windoze a thousand appologies
u can't lock files in unix unless u lock the directory containing those files. remember u don't need write permission on a file to delete it. all it takes is write permission on the directory containing the file. so a user can very well delete the file and put a new one with his pref. removing write permissions on the home directory would prevent some applications from running.