Lab 7.1: Build shared team folders

Dit deel is nog niet vertaald. Je ziet de Engelse tekst.

Doel

Create two team folders where members work together, new files get the team group, and nobody can delete the files of others.

Voordat je begint

Work on server1 as root. You need the users and groups from lab 6.1 (anna, bob in sales; bob in account). If they do not exist, create them.

Taken

Create the folders /data/sales and /data/account.
/data/sales belongs to the group sales, /data/account to the group account. The owner of both is root.
Group members may read and write in their folder. Others may not even list the content.
New files in each folder must get the group of the folder.
Users may delete only their own files in these folders.
As anna, create /data/sales/anna.txt. As bob, try to delete it (this must fail) and create /data/sales/bob.txt.

Controleer je werk

#ls -ld /data/sales /data/account
#ls -l /data/sales
#su - bob -c 'rm -f /data/sales/anna.txt'
#su - carol -c 'ls /data/sales'

Both folders show drwxrws--T with the right group.
anna.txt and bob.txt have the group sales.
bob gets "Operation not permitted"; carol gets "Permission denied".

Hints

Toon de hints

chown root:GROUP or chgrp GROUP.
770 for the base rights; SGID = 2, sticky = 1, so the first digit is 3.

Oplossing

Toon de oplossing

Create the folders.
```
#mkdir -p /data/sales /data/account
```

Set the groups.

#chgrp sales /data/sales
#chgrp account /data/account

Set rights, SGID and sticky in one go (tasks 3, 4 and 5).
```
#chmod 3770 /data/sales /data/account
```

Test as the users.

#su - anna -c 'touch /data/sales/anna.txt'
#su - bob -c 'rm -f /data/sales/anna.txt'
rm: cannot remove '/data/sales/anna.txt': Operation not permitted
#su - bob -c 'touch /data/sales/bob.txt'
#ls -l /data/sales

Build shared team folders

Doel

Voordat je begint

Taken

Controleer je werk

Hints

Oplossing

Mijn notities

Lessen voor dit lab

Commando's in dit lab