[CentOS] Samba Permissions - Sanity check

[Scott Silva]

on 2-19-2009 1:31 PM Tim Nelson spake the following:
> ----- "MHR" <mhullrich at gmail.com> wrote:
>> On Thu, Feb 19, 2009 at 12:15 PM, nate <centos-T6AQWPvKiI1cRAk/VAjCeQ at public.gmane.org>
>> wrote:
>>> Tim Nelson wrote:
>>>
>>>> I've been around and around on this topic and I'm just hoping
>> someone can
>>>> give me a little sanity by confirming 'yay or nay' whether this is
>> possible
>>>> or not.
>>> It may be possible to prevent them from deleting a file, but if
>> they
>>> have write access it wouldn't be possible from effectively deleting
>>> the file by wiping it's contents(truncating it).
>>>
>> However, file creation and deletion are functions of the directory
>> permissions where the file resides.  If a directory allows a user to
>> write to it, they can create and delete files in that directory with
>> reckless abandon.
>>
>> There are probably some intricate ways around this particular
>> problem,
>> but they can get pretty complicated really fast.
>>
>> HTH.
>>
>> mhr
> 
> I've been trying to devise a way around this problem and as you mentioned, it gets extremely complicated quickly. It's even more complicated than allowing users to delete files and restoring the file from a backup set. Well, at least I don't feel I'm going insane anymore (for now...).
> 
> Thank you to all who responded.
> 
> --Tim
I have enabled the recycle bin vfs object on my systems. That way a user has
to really try and delete a file to make it go away. Like windows, they would
have to delete it, go look in the recycle bin (that you can hide) and delete
it again.
It has saved me many hours of recovering stuff.

-- 
MailScanner is like deodorant...
You hope everybody uses it, and
you notice quickly if they don't!!!!

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 258 bytes
Desc: OpenPGP digital signature
URL: <http://lists.centos.org/pipermail/centos/attachments/20090219/9c3cc652/attachment.sig>