CentOS - Jan 2013 - ACL/permissions question

Hello listmates,

If I have a regular, ACL-capable filesystem on Linux (say, ext4 or xfs) is
there a way for me to establish the following:

1) There is a directory, say, /home/joe . It is owned by user joe . No one
but joe (and root, of course) can read or write anything in this directory.

2) No one can change permissions on that directory, not even joe. In other
words, in joe all of a sudden joe decided to open his directory up to the
world (or the group he is a member of) by doing something akin to:

chmod 777 /home/joe

he would not succeed.

Thanks in advance for any help.

Boris.

You could always try 'chattr +i /home/joe' to make it immutable.  Check
out
the man page for details...
On Jan 31, 2013 11:44 PM, "Boris Epstein" <borepstein at
gmail.com> wrote:
> Hello listmates,
>
> If I have a regular, ACL-capable filesystem on Linux (say, ext4 or xfs) is
> there a way for me to establish the following:
>
> 1) There is a directory, say, /home/joe . It is owned by user joe . No one
> but joe (and root, of course) can read or write anything in this directory.
>
> 2) No one can change permissions on that directory, not even joe. In other
> words, in joe all of a sudden joe decided to open his directory up to the
> world (or the group he is a member of) by doing something akin to:
>
> chmod 777 /home/joe
>
> he would not succeed.
>
> Thanks in advance for any help.
>
> Boris.
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> http://lists.centos.org/mailman/listinfo/centos
>