Chitussi, Dennis
2016-Jun-07 21:22 UTC
[Samba] How to prevent users from deleting directories
Hello All, I am new to Samba and having to learn it fast as I have taken over for someone who left staff. I have been asked if we can prevent users from removing directories and sub directories under a Samba share while still allowing them to read and write files to these directories. For instance we have a share defined as follows: [Baskets_Out] comment = NGP Test Baskets Out path = /ngiohome/ngio/Baskets/Out force user = ngio force group = Cci read only = No guest ok = Yes hide dot files = No veto files = /SafeDir/ All users access the share as the same user. I tried changing unix permissions and ownership but that didn't work. Even when I made the ownership root root, I was still able to remove that directory. I'm looking at - force directory mode or force directory security mode to see if that might accomplish the lockdown of directories that I am trying to achieve. Thanks, Dennis
Hi, Have you tried "Stickey Bit" as a "root" user on top directory?[a] If not then try it then let us know. [a]. <http://www.thegeekstuff.com/2013/02/sticky-bit/?utm_source=feedburner> --Regards Ashishkumar S. Yadav On Wed, Jun 8, 2016 at 2:52 AM, Chitussi, Dennis <dchitus at torstar.ca> wrote:> Hello All, > I am new to Samba and having to learn it fast as I have taken over for > someone who left staff. I have been asked if we can prevent users from > removing directories and sub directories under a Samba share while still > allowing them to read and write files to these directories. For instance we > have a share defined as follows: > > [Baskets_Out] > comment = NGP Test Baskets Out > path = /ngiohome/ngio/Baskets/Out > force user = ngio > force group = Cci > read only = No > guest ok = Yes > hide dot files = No > veto files = /SafeDir/ > > All users access the share as the same user. I tried changing unix > permissions and ownership but that didn't work. Even when I made the > ownership root root, I was still able to remove that directory. I'm looking > at - force directory mode or force directory security mode to see if that > might accomplish the lockdown of directories that I am trying to achieve. > > Thanks, > Dennis > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba >