<p>Is this a little like usermod -aG added_group fred one could use to add a group to user fred without changing freds original group?</p>
<p>Wolf</p>
<p><a href="http://evergreen-community-01.lyrasistechnology.org">http://evergreen-community-01.lyrasistechnology.org</a><br>
<a href="http://sourcefreedom.com">http://sourcefreedom.com</a><br>
Apache developer:<br>
<a href="mailto:wolfhalton@apache.org">wolfhalton@apache.org</a></p>
<div class="gmail_quote">On Jun 4, 2012 2:02 PM, "Jeff Hubbs" <<a href="mailto:jhubbslist@att.net">jhubbslist@att.net</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
FWIW, the convention in Gentoo is to use "
<span>useradd -m -G users <username>".</span><br>
<br>
On 6/4/12 11:53 AM, Lightner, Jeff wrote:
<blockquote type="cite">
<pre>Nice write up on UPG.
I'll note that although RHEL does add the UPG by default it isn't required and in fact there is a "-n" flag in useradd to NOT add a UPG. Here we don't use UPGs might have chosen differently if we'd understood the below. (But then again we use user admin accounts and expect shared directory files to be owned by those user admins - our "real" users use sudo to become those admin accounts.)
-----Original Message-----
From: <a href="mailto:ale-bounces@ale.org" target="_blank">ale-bounces@ale.org</a> [<a href="mailto:ale-bounces@ale.org" target="_blank">mailto:ale-bounces@ale.org</a>] On Behalf Of James Sumners
Sent: Monday, June 04, 2012 11:28 AM
To: Atlanta Linux Enthusiasts
Subject: Re: [ale] User Private Group -- what are the benefits?
This is precisely the information I needed. There are several SGID directories we have that rely on this functionality (an improvement over the old configuration IMHO). What I didn't realize is that it relied on the user's umask for setting group permissions in the SGID directory.
Thank you.
On Mon, Jun 4, 2012 at 10:58 AM, scott mcbrien <a href="mailto:smcbrien@gmail.com" target="_blank"><smcbrien@gmail.com></a> wrote:
</pre>
<blockquote type="cite">
<pre>Thanks to the less restrictive umask, the group permissions also
include write. Because fred is giving that to his private group that
no one else belongs to, it's not a big deal. But on this web docroot
directory, when you add the SGID permission, as though by magic we
have happiness. Now when Fred creates files (that automatically are
chgrp'ed to web):
-rw-rw-r-- fred web freds_web_file
Other people who belong to the web group can make changes to Fred's
files without Fred (or you) needing to re-permission files all the
time. Add to that the fact that SGID is inheritable, and now if the
web group decides they need sub-dir structure or whatnot, they can
create what they need and you don't have to do jack.
</pre>
</blockquote>
<pre>
--
James Sumners
<a href="http://james.roomfullofmirrors.com/" target="_blank">http://james.roomfullofmirrors.com/</a>
"All governments suffer a recurring problem: Power attracts pathological personalities. It is not that power corrupts but that it is magnetic to the corruptible. Such people have a tendency to become drunk on violence, a condition to which they are quickly addicted."
Missionaria Protectiva, Text QIV (decto) CH:D 59
_______________________________________________
Ale mailing list
<a href="mailto:Ale@ale.org" target="_blank">Ale@ale.org</a>
<a href="http://mail.ale.org/mailman/listinfo/ale" target="_blank">http://mail.ale.org/mailman/listinfo/ale</a>
See JOBS, ANNOUNCE and SCHOOLS lists at
<a href="http://mail.ale.org/mailman/listinfo" target="_blank">http://mail.ale.org/mailman/listinfo</a>
Athena®, Created for the Cause(tm)
Making a Difference in the Fight Against Breast Cancer
---------------------------------
CONFIDENTIALITY NOTICE: This e-mail may contain privileged or confidential information and is for the sole use of the intended recipient(s). If you are not the intended recipient, any disclosure, copying, distribution, or use of the contents of this information is prohibited and may be unlawful. If you have received this electronic transmission in error, please reply immediately to the sender that you have received the message in error, and delete it. Thank you.
----------------------------------
_______________________________________________
Ale mailing list
<a href="mailto:Ale@ale.org" target="_blank">Ale@ale.org</a>
<a href="http://mail.ale.org/mailman/listinfo/ale" target="_blank">http://mail.ale.org/mailman/listinfo/ale</a>
See JOBS, ANNOUNCE and SCHOOLS lists at
<a href="http://mail.ale.org/mailman/listinfo" target="_blank">http://mail.ale.org/mailman/listinfo</a>
</pre>
</blockquote>
<br>
</div>
<br>_______________________________________________<br>
Ale mailing list<br>
<a href="mailto:Ale@ale.org">Ale@ale.org</a><br>
<a href="http://mail.ale.org/mailman/listinfo/ale" target="_blank">http://mail.ale.org/mailman/listinfo/ale</a><br>
See JOBS, ANNOUNCE and SCHOOLS lists at<br>
<a href="http://mail.ale.org/mailman/listinfo" target="_blank">http://mail.ale.org/mailman/listinfo</a><br>
<br></blockquote></div>