Re: IFS Permissions

Thanks Scott - as ever the perfect description. So I guess this has no equivalent in Unix/Linux systems.

As I noted in another post, sadly it means that permissions are not the cause of our issues with Wordpress and we need to look elsewhere.


Jon Paris

www.partner400.com
www.SystemiDeveloper.com

On Jun 26, 2015, at 12:43 AM, Scott Klement <midrange-l@xxxxxxxxxxxxxxxx> wrote:

Jon,

IBM i has always done this on directories (but not on files), I don't think I ever discovered why. Maybe it's just because that's a more natural way of handling security on our system?

What it's doing is setting the 'set gid' bit. What this does (at least on Unix, and I assume also on i) is cause any new files/dirs created inside the directory to be automatically given the same group profile as the directory with the set gid bit set.

This can be very useful, for example if you have a directory tree shared by a department where everyone needs access to the files, you set 'set gid' bit and set the directory's group profile to a group profile for that department. (let's say 'sales' for the sake of example). Now all new files or subdirectories are also given sales, so every time files are created in this directory tree, all sales people have access by virtue of the group profile. No need to manually run chmod/chown/chgrp for each new file created.

If you don't want it set, you can do this:

chmod 755 mydir
chmod g-s mydir

The "g-s" means for the group profile remove the 'set' flag. So it should remove the setgid leaving it as purely 755 (rather than 2755).

But I would think that if 755 works, 2755 should also work? So not sure if you really need to do that.

-SK

On 6/25/2015 5:28 PM, Jon Paris wrote:

Any Unix/IFS gurus out there?

I am being directed to set the permissions for a number of directories and files to 755. This I have done with chmod but the tool that checks the status is reporting that the resulting value is now 2755. Huh?

Anyone got any idea why this might be? And how to fix it?


Jon Paris

www.partner400.com
www.SystemiDeveloper.com

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.