Linux:group - Revision history

Woozle: moved to htyp

2005-10-14T18:01:45Z

moved to htyp

← Older revision		Revision as of 18:01, 14 October 2005
Line 1:		Line 1:
	~~[[Techniques]]: [[Linux]]: [[Linux:group\|group]]~~		{{to htyp}}

	~~In Linux and other Unix-based operating systems, a '''group''' is an entity~~ to ~~which a [[Linux:user\|user]] may belong and which confers certain "privileges" or "rights" to its member users.~~

	~~==How Groups Are Used==~~
	Groups play a significant role in system [[Linux:security\|security]]. Ideally, a system administrator can define roles which the various users might play (e.g. scanner operator, webmaster, developer), create a group for each of those roles, and then assign the necessary rights (for performing those functions) to each ''group'', rather than to each ''user''. When managing users, it is then only necessary to assign a new user to the group(s) corresponding to that user's role(s); this reduces the amount of work necessary to properly implement security (thus encouraging proper security to be implemented) as well as reducing the chances of inadvertantly giving a user unneeded permissions and thereby creating a security risk.

	~~==Details==~~
	*Every [[Linux:file\|file]] (including [[Linux:directory\|directories]]) has a set of '''permissions''', an '''owner [[Linux:user\|user]]''' and an '''owner group'''. Every file or directory's permission set is composed of twelve bits, but the meaning of the bits is slightly different for directories than for files.
	*'''File permissions''' contain three groups of three bits each. The first set of three applies if and only if the current user is the same as the file's owner user; the second set applies only if the current user belongs to the file's owner group (except for the file's owner user), and the third set applies to everyone else. There are some additional specialized bits. Going from Most Significant Bit (MSB) to Least (LSB):
	**'''Bit 11''': "set user ID" -- set user ID on execution
	**'''Bit 10''': "set group ID" -- set group ID on execution
	**'''Bit 09''': "sticky" -- largely obsolete; used on early Unix systems. See [[chmod]] for more information.
	**'''Bits 8-0''': rwx (owner user), rwx (owner group), rwx (everyone else): r = can read file, w = can write file, x = can execute file
	*'''Directory permissions''' are similar:
	**'''Bit 11''': "set user ID"
	**'''Bit 10''': "set group ID"
	**'''Bit 09''': "sticky" --
	**:'''1''' = files in that directory may be unlinked or renamed only by root or their owner.
	**:'''0''' = anyone able to write to the directory can delete or rename files.
	***The sticky bit is commonly found on directories, such as /tmp, that are "world-writable" (rwxrwxrwx)
	**'''Bits 8-0''': same as for files, except "x" means "can enter (chdir into) directory"
	~~==Commands==~~
	~~Commands used for managing users, groups and permissions include:~~
	*Groups:
	**[[groupadd]] -- create a new group
	**[[groupdel]] -- delete an existing group
	**[[groupmod]] -- modify a group
	*Users:
	**[[useradd]] -- create a new user
	**[[userdel]] -- delete an existing user
	**[[usermod]] -- modify a user account
	*Permissions:
	**[[chmod]] -- change permissions on a [[Linux:file\|file]] or [[Linux:directory\|directory]]
	**[[chgrp]] -- change a file's owner group

Woozle: /* Commands */

2005-06-12T16:24:18Z

Commands

← Older revision		Revision as of 16:24, 12 June 2005
Line 26:		Line 26:
	**[[groupadd]] -- create a new group		**[[groupadd]] -- create a new group
	**[[groupdel]] -- delete an existing group		**[[groupdel]] -- delete an existing group
	**[[groupmod]] --		**[[groupmod]] -- modify a group
	*Users:		*Users:
	**[[useradd]] -- create a new user		**[[useradd]] -- create a new user

Woozle: /* Commands */

2005-06-12T16:02:56Z

Commands

← Older revision		Revision as of 16:02, 12 June 2005
Line 30:		Line 30:
	**[[useradd]] -- create a new user		**[[useradd]] -- create a new user
	**[[userdel]] -- delete an existing user		**[[userdel]] -- delete an existing user
	**[[usermod]] --		**[[usermod]] -- modify a user account
	*Permissions:		*Permissions:
	**[[chmod]] -- change permissions on a [[Linux:file\|file]] or [[Linux:directory\|directory]]		**[[chmod]] -- change permissions on a [[Linux:file\|file]] or [[Linux:directory\|directory]]
	**[[chgrp]] -- change a file's owner group		**[[chgrp]] -- change a file's owner group

Woozle: /* Details */

2005-06-10T00:50:49Z

Details

@@ Line 7: / Line 7: @@
 ==Details==
-*Every file (including directories) has a set of '''permissions''', an '''owner [[Linux:user|user]]''' and an '''owner group'''. Every file or directory's permission set is composed of twelve bits, but the meaning of the bits is slightly different for directories than for files.
+*Every [[Linux:file|file]] (including [[Linux:directory|directories]]) has a set of '''permissions''', an '''owner [[Linux:user|user]]''' and an '''owner group'''. Every file or directory's permission set is composed of twelve bits, but the meaning of the bits is slightly different for directories than for files.
 *'''File permissions''' contain three groups of three bits each. The first set of three applies if and only if the current user is the same as the file's owner user; the second set applies only if the current user belongs to the file's owner group (except for the file's owner user), and the third set applies to everyone else. There are some additional specialized bits. Going from Most Significant Bit (MSB) to Least (LSB):
 **'''Bit 11''': "set user ID" -- set user ID on execution
@@ Line 21: / Line 21: @@
 ***The sticky bit is commonly found on directories, such as /tmp, that are "world-writable" (rwxrwxrwx)
 **'''Bits 8-0''': same as for files, except "x" means "can enter (chdir into) directory"

Woozle at 00:45, 10 June 2005

2005-06-10T00:45:23Z

← Older revision		Revision as of 00:45, 10 June 2005
Line 1:		Line 1:
	[[Techniques]]: [[Linux]]: [[Linux:group\|group]]		[[Techniques]]: [[Linux]]: [[Linux:group\|group]]

	In Linux and other Unix-based operating systems, a '''group''' is an entity to which a [[Linux:user\|user]] may belong and which confers certain "privileges" or "rights" to ~~such~~ users.		In Linux and other Unix-based operating systems, a '''group''' is an entity to which a [[Linux:user\|user]] may belong and which confers certain "privileges" or "rights" to its member users.

	==How Groups Are Used==		==How Groups Are Used==

Woozle at 00:44, 10 June 2005

2005-06-10T00:44:36Z

← Older revision		Revision as of 00:44, 10 June 2005
Line 1:		Line 1:
	[[Techniques]]: [[Linux]]: [[Linux:group\|group]]		[[Techniques]]: [[Linux]]: [[Linux:group\|group]]

	In Linux and other Unix-based operating systems, a '''group''' is an entity to which a [[Linux:user\|user]] may belong and which confers certain "~~priveleges~~" or "rights" to such users.		In Linux and other Unix-based operating systems, a '''group''' is an entity to which a [[Linux:user\|user]] may belong and which confers certain "privileges" or "rights" to such users.

	==How Groups Are Used==		==How Groups Are Used==

Woozle: /* How Groups Are Used */

2005-06-10T00:43:53Z

How Groups Are Used

← Older revision		Revision as of 00:43, 10 June 2005
Line 4:		Line 4:

	==How Groups Are Used==		==How Groups Are Used==
	Groups play a significant role in system [[Linux:security\|security]]. Ideally, a system administrator can define roles which the various users might play (e.g. scanner operator, webmaster, developer), create a group for each of those roles, and then assign the necessary rights (for performing those functions) to each ''group'', rather than to each ''user''. When managing users, it is then only necessary to assign a new user to the group(s) corresponding to that user's role(s).		Groups play a significant role in system [[Linux:security\|security]]. Ideally, a system administrator can define roles which the various users might play (e.g. scanner operator, webmaster, developer), create a group for each of those roles, and then assign the necessary rights (for performing those functions) to each ''group'', rather than to each ''user''. When managing users, it is then only necessary to assign a new user to the group(s) corresponding to that user's role(s); this reduces the amount of work necessary to properly implement security (thus encouraging proper security to be implemented) as well as reducing the chances of inadvertantly giving a user unneeded permissions and thereby creating a security risk.

	==Details==		==Details==
	*Every file (including directories) has a set of '''permissions''', an '''owner [[Linux:user\|user]]''' and an '''owner group'''. Every file or directory's permission set is composed of twelve bits, but the meaning of the bits is slightly different for directories than for files.		*Every file (including directories) has a set of '''permissions''', an '''owner [[Linux:user\|user]]''' and an '''owner group'''. Every file or directory's permission set is composed of twelve bits, but the meaning of the bits is slightly different for directories than for files.

Woozle: /* Details */

2005-06-10T00:42:34Z

Details

← Older revision		Revision as of 00:42, 10 June 2005
Line 7:		Line 7:
	==Details==		==Details==
	*Every file (including directories) has a set of '''permissions''', an '''owner [[Linux:user\|user]]''' and an '''owner group'''. Every file or directory's permission set is composed of twelve bits, but the meaning of the bits is slightly different for directories than for files.		*Every file (including directories) has a set of '''permissions''', an '''owner [[Linux:user\|user]]''' and an '''owner group'''. Every file or directory's permission set is composed of twelve bits, but the meaning of the bits is slightly different for directories than for files.
	*'''File permissions''' contain three groups of three bits each. The first set of three applies if and only if the current user is the same as the file's owner user; the second set applies only if the current user belongs to the file's owner group, and the third set applies to everyone else. There are some additional specialized bits. Going from Most Significant Bit (MSB) to Least (LSB):		*'''File permissions''' contain three groups of three bits each. The first set of three applies if and only if the current user is the same as the file's owner user; the second set applies only if the current user belongs to the file's owner group (except for the file's owner user), and the third set applies to everyone else. There are some additional specialized bits. Going from Most Significant Bit (MSB) to Least (LSB):
	**Bit 11: "set user ID"		**'''Bit 11''': "set user ID" -- set user ID on execution
	**Bit 10: "set group ID"		**'''Bit 10''': "set group ID" -- set group ID on execution
	**Bit 09: "sticky" -- largely obsolete; used on early Unix systems. See [[chmod]] for more information.		**'''Bit 09''': "sticky" -- largely obsolete; used on early Unix systems. See [[chmod]] for more information.
	**Bits 8-0: rwx (owner user), rwx (owner group), rwx (everyone else): r = can read file, w = can write file, x = can execute file		**'''Bits 8-0''': rwx (owner user), rwx (owner group), rwx (everyone else): r = can read file, w = can write file, x = can execute file
	*Directory permissions are similar:		*'''Directory permissions''' are similar:
	**Bit 11: "set user ID"		**'''Bit 11''': "set user ID"
	**Bit 10: "set group ID"		**'''Bit 10''': "set group ID"
	**Bit 09: "sticky" --		**'''Bit 09''': "sticky" --
	**:1 = files in that directory may be unlinked or renamed only by root or their owner.		**:'''1''' = files in that directory may be unlinked or renamed only by root or their owner.
	**:0 = anyone able to write to the directory can delete or rename files.		**:'''0''' = anyone able to write to the directory can delete or rename files.
	***The sticky bit is commonly found on directories, such as /tmp, that are "world-writable" (rwxrwxrwx)		***The sticky bit is commonly found on directories, such as /tmp, that are "world-writable" (rwxrwxrwx)
	**Bits 8-0: same as for files, except "x" means "can enter (chdir into) directory"		**'''Bits 8-0''': same as for files, except "x" means "can enter (chdir into) directory"

Woozle at 23:40, 9 June 2005

2005-06-09T23:40:18Z

New page

[[Techniques]]: [[Linux]]: [[Linux:group|group]]

In Linux and other Unix-based operating systems, a '''group''' is an entity to which a [[Linux:user|user]] may belong and which confers certain "priveleges" or "rights" to such users.

==How Groups Are Used==
Groups play a significant role in system [[Linux:security|security]]. Ideally, a system administrator can define roles which the various users might play (e.g. scanner operator, webmaster, developer), create a group for each of those roles, and then assign the necessary rights (for performing those functions) to each ''group'', rather than to each ''user''. When managing users, it is then only necessary to assign a new user to the group(s) corresponding to that user's role(s).
==Details==
*Every file (including directories) has a set of '''permissions''', an '''owner [[Linux:user|user]]''' and an '''owner group'''. Every file or directory's permission set is composed of twelve bits, but the meaning of the bits is slightly different for directories than for files.
*'''File permissions''' contain three groups of three bits each. The first set of three applies if and only if the current user is the same as the file's owner user; the second set applies only if the current user belongs to the file's owner group, and the third set applies to everyone else. There are some additional specialized bits. Going from Most Significant Bit (MSB) to Least (LSB):
**Bit 11: "set user ID"
**Bit 10: "set group ID"
**Bit 09: "sticky" -- largely obsolete; used on early Unix systems. See [[chmod]] for more information.
**Bits 8-0: rwx (owner user), rwx (owner group), rwx (everyone else): r = can read file, w = can write file, x = can execute file
*Directory permissions are similar:
**Bit 11: "set user ID"
**Bit 10: "set group ID"
**Bit 09: "sticky" --
**:1 = files in that directory may be unlinked or renamed only by root or their owner.
**:0 = anyone able to write to the directory can delete or rename files.
***The sticky bit is commonly found on directories, such as /tmp, that are "world-writable" (rwxrwxrwx)
**Bits 8-0: same as for files, except "x" means "can enter (chdir into) directory"