Re: IFS Permissions

[Scott Klement <midrange-l@xxxxxxxxxxxxxxxx>]

Jon,

IBM i has always done this on directories (but not on files), I don't 
think I ever discovered why.  Maybe it's just because that's a more 
natural way of handling security on our system?

What it's doing is setting the 'set gid' bit. What this does (at least 
on Unix, and I assume also on i) is cause any new files/dirs created 
inside the directory to be automatically given the same group profile as 
the directory with the set gid bit set.

This can be very useful, for example if you have a directory tree shared 
by a department where everyone needs access to the files, you set 'set 
gid' bit and set the directory's group profile to a group profile for 
that department.  (let's say 'sales' for the sake of example).  Now all 
new files or subdirectories are also given sales, so every time files 
are created in this directory tree, all sales people have access by 
virtue of the group profile.  No need to manually run chmod/chown/chgrp 
for each new file created.

If you don't want it set, you can do this:

chmod 755 mydir
chmod g-s mydir

The "g-s" means for the group profile remove the 'set' flag.  So it 
should remove the setgid leaving it as purely 755 (rather than 2755).

But I would think that if 755 works, 2755 should also work? So not sure 
if you really need to do that.

-SK

On 6/25/2015 5:28 PM, Jon Paris wrote:
> Any Unix/IFS gurus out there?
>
> I am being directed to set the permissions for a number of directories and files to 755.  This I have done with chmod but the tool that checks the status is reporting that the resulting value is now 2755. Huh?
>
> Anyone got any idea why this might be? And how to fix it?
>
>
> Jon Paris
>
> www.partner400.com
> www.SystemiDeveloper.com