similar to: Re: Capabilities and the sticky-bit...

> How do I start a process with a limited set of capabilities under > another uid? > > Use the sucap utility which changes uid from root without loosing any > capabilities. Normally all capabilities are cleared when changing uid > from root. The sucap utility requires the CAP_SETPCAP capability. > The following example starts updated under uid updated and gid updated >

Add a mount option user_subvol_rm_allowed that allows users to delete a (potentially non-empty!) subvol when they would otherwise we allowed to do an rmdir(2). We duplicate the may_delete() checks from the core VFS code to implement identical security checks (minus the directory size check). Signed-off-by: Sage Weil <sage@newdream.net> --- fs/btrfs/ctree.h | 1 + fs/btrfs/ioctl.c |

Hi, there, I have 2 machines ( running Linux Red Hat 8.0 and Windows Xp individually), which share a broadband Internet connection through a router. After installing Samba 2.2.7.a on Linux machine, I can use "smbclient" to access Windows machines, see the files and transfer files. Linux machine info: name: WINNY share folder name: gong ip: 192.168.123.153 valid

I've attached the patch since I don't yet have an easy way to make git format-patch and kmail play nice together. The basic idea is during a rotate/other cube transform, 'sticky' windows stick to the screen instead of being redrawn once per face (its an option, the default is the old behaviour) Consider this, please, essentially an RFC - this particular behaviour was

Is there a way to provide "sticky" options to ActiveRecord::Base::Find ? I''m thinking something with a use model like: class Function < ActiveRecord::Base sticky :conditions => "lft > 0", :order => "lft ASC" end Where all subsuquent find operations have those options applied. In this case: Function.find(:all) Would actually be equivalent

http://bugzilla.mindrot.org/show_bug.cgi?id=1176 frederik.deweerdt at gmail.com changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |DUPLICATE ------- Comment #2 from frederik.deweerdt at gmail.com

Dear I encounter this error on Samba 3.0.28a, i would like to know how to fix it, The file is owned by root, i don't understand whats going wrong... smbd[15232]: [2011/02/18 16:32:22, 0] param/loadparm.c:load_usershare_shares(4878) Feb 18 16:32:22 virtualbox smbd[15232]: load_usershare_shares: directory /var/lib/samba/usershares/data is not owned by root or does not have the sticky bit

Hi, I used to have a couple of applications running on a single server. Now they have been migrated in two server, load balanced using sticky sessions. They told me that files in the first server will be replicated during the night to the secondary. I still have my old Capistrano recipe to be updated. I thought I can create two different environments, one for the first server, one for the second

When running a program in wine, and I use a hotkey combo to either switch desktops or open another program (example: to bring forward my fullscreen terminal), the modifier keys are still depressed, according to wine, when I switch back to the wine window. I did some tests, and found that when switching desktops away from wine with a hotkey with modifiers, and then switching back with a method

https://bugzilla.mindrot.org/show_bug.cgi?id=1436 Summary: scp -p does not preserve sticky bit (01000) Classification: Unclassified Product: Portable OpenSSH Version: 4.7p1 Platform: All OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: scp AssignedTo: bitbucket at

Hi all. This is my first post here... sorry if this topic was already discussed, but I could not find anything related. In applications run with wine, especially games (but not only) one or more keys seem to be pressed. I mean, even if I don't even touch the keyboard, the program thinks I continuously press UP ARROW and/or RIGHT ARROW. This happens regardless of applications. Sometimes I can

Trying to find a solution to a sticky problem here. We have 3 OpenSER systems. Phones register with the OpenSER systems, and after they authenticate the user, pass the registration info using OpenSER's send() command to all Asterisk boxes sitting behind them. Each asterisk system then knows about every phone. For this to work, I had to turn off authentication in Asterisk for both

Hi, I was able to get ZBrush 3 running (full version, 7 day grace mode) but none of the ctrl/alt/shift combinations are working like they should. For example, you should be able to hold Control and drag to draw out a mask, and when you press Control, the cursor turns yellow (as it should to denote the mask function) and it looks like it's going to work, but then acts like a normal mouse

Hello there, I have the following problem. I need a user not to be able to delete (rm -rf) a dir inside his home directory (a dir which is owned by him). The sticky bit is supposed to do just that... and it does, in every part of the file system but in his home. Same goes for acls (setfacl -m u:user:rx dir), a rm -rf inside his directory will render the acls useless. Is there any workaround

Hi I have a situation where i need to blanketly allow read permissions on /opt to any user at all. I have some bad behaving apps though that seem to overwrite these permissions and do not set world read on their log directories. Is there any way i can make /opt world readable and make sure these permissions stick to all subfolders and not allow users other than root/sudo to change them?

Lo folks, I got a little question. Ive set up samba 3.0.0 + RH 8. And since ACL within samba only works on share niveau i wanted to implement POSIX ACL. I was thinking what is the difference between "full" access and "change" on a NT4 server. As far as i could think the difference is that "full" acces can delete a file and "change" can only change it. So i

Hello, I've just tested a share configuration like the following and it did not work as I've expected it. Maybe someone can explain me what I'm doing wrong. [Marktplatz] path = /marktplatz msdfs root = no writeable = yes browseable = yes public = no dos filemode = no hide unreadable = no create mode = 0644 directory mode = 1777 force create mode = 0644 force directory mode = 1777

Hi I want all files created in a share to be group owned by a group called staff. To do this I have a share called reports which is chmod g+s staff: drwxrws---+ 9 root staff 4096 Jun 18 11:15 reports If I create a file from Linux, the sticky bit works: -rw-rw----+ 1 steve2 staff 0 Jun 18 10:57 stevelinux.txt If I create it under windows, it doesn't: -rwxrwx---+ 1 steve2 Domain

Sorry to ask a windows question her but I didn't know if a windows group would know about the sticky bit. I have a windows server that is our primary file server in our samba domain. I am hoping that windows as something like the sticky bit that can be set on a folder where in only the creator of the file can modify the file. Any easy way to do this using ntfs acls ? -- David Bear mobile:

Hi, I have an Ubuntu Linux server where I use Sticky Bits to help enforce specific permissions on Samba shares: -- Each Samba share is associated with a unique Linux group -- Only members of the group can access the share -- All members of the group can create new files and directories in the share -- SGID is set on all directories. -- The "creator" of any new file will be the