معمل 7.1: Build shared team folders

هذا الجزء لم يُترجم بعد. أنت ترى النص الإنجليزي.

الهدف

Create two team folders where members work together, new files get the team group, and nobody can delete the files of others.

قبل أن تبدأ

Work on server1 as root. You need the users and groups from lab 6.1 (anna, bob in sales; bob in account). If they do not exist, create them.

المهام

Create the folders /data/sales and /data/account.
/data/sales belongs to the group sales, /data/account to the group account. The owner of both is root.
Group members may read and write in their folder. Others may not even list the content.
New files in each folder must get the group of the folder.
Users may delete only their own files in these folders.
As anna, create /data/sales/anna.txt. As bob, try to delete it (this must fail) and create /data/sales/bob.txt.

تحقّق من عملك

#ls -ld /data/sales /data/account
#ls -l /data/sales
#su - bob -c 'rm -f /data/sales/anna.txt'
#su - carol -c 'ls /data/sales'

Both folders show drwxrws--T with the right group.
anna.txt and bob.txt have the group sales.
bob gets "Operation not permitted"; carol gets "Permission denied".

تلميحات

اعرض التلميحات

chown root:GROUP or chgrp GROUP.
770 for the base rights; SGID = 2, sticky = 1, so the first digit is 3.

الحل

اعرض الحل

Create the folders.
```
#mkdir -p /data/sales /data/account
```

Set the groups.

#chgrp sales /data/sales
#chgrp account /data/account

Set rights, SGID and sticky in one go (tasks 3, 4 and 5).
```
#chmod 3770 /data/sales /data/account
```

Test as the users.

#su - anna -c 'touch /data/sales/anna.txt'
#su - bob -c 'rm -f /data/sales/anna.txt'
rm: cannot remove '/data/sales/anna.txt': Operation not permitted
#su - bob -c 'touch /data/sales/bob.txt'
#ls -l /data/sales

Build shared team folders

الهدف

قبل أن تبدأ

المهام

تحقّق من عملك

تلميحات

الحل

ملاحظاتي

دروس هذا المعمل

الأوامر في هذا المعمل