This may be more of a general linux question but is there a simple way of preventing users from creating symlinks to or from certain directories? I have a /scratch dir that's a single 27TB volume and I don't want users linking their home dirs as there's a chance it will screw up our external backups. Is this a job for SELinux? Any ideas? Thanx, Russell ======================================================================Attention: The information contained in this message and/or attachments from AgResearch Limited is intended only for the persons or entities to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipients is prohibited by AgResearch Limited. If you have received this message in error, please notify the sender immediately. ======================================================================-------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.centos.org/pipermail/centos/attachments/20110630/30aa67b8/attachment-0002.html>
On Thu, Jun 30, 2011 at 11:56:07AM +1200, Smithies, Russell wrote:> This may be more of a general linux question but is there a simple way of preventing users from creating symlinks to or from certain directories? > I have a /scratch dir that's a single 27TB volume and I don't want users linking their home dirs as there's a chance it will screw up our external backups.Can't your backups simply ignore symlinks? Or (more sensibly) backup the symlinks as links, instead of dereferencing them? Perhaps SELinux can do what you want, but it seems like overkill compared to telling the backup program what to backup (and what not). --keith -- kkeller at wombat.san-francisco.ca.us -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 197 bytes Desc: not available URL: <http://lists.centos.org/pipermail/centos/attachments/20110629/9a416a4e/attachment-0002.sig>
Keith Keller wrote:> On Thu, Jun 30, 2011 at 11:56:07AM +1200, Smithies, Russell wrote: >> This may be more of a general linux question but is there a simple way of preventing users from creating symlinks to or from certain directories? >> I have a /scratch dir that's a single 27TB volume and I don't want users linking their home dirs as there's a chance it will screw up our external backups. > > Can't your backups simply ignore symlinks? Or (more sensibly) backup > the symlinks as links, instead of dereferencing them? > > Perhaps SELinux can do what you want, but it seems like overkill > compared to telling the backup program what to backup (and what not). >+10