Skip to content

LGSM isn't in according to POSIX ACL standard #3861

Open
@LeChatP

Description

@LeChatP

if [ -f "${rootdir}/${selfname}" ]; then
if [ "$(find "${rootdir}/${selfname}" -not -user "$(whoami)" | wc -l)" -ne "0" ]; then
selfownissue=1
fi
fi
if [ -d "${functionsdir}" ]; then
if [ "$(find "${functionsdir}" -not -user "$(whoami)" | wc -l)" -ne "0" ]; then
funcownissue=1
fi
fi
if [ -d "${serverfiles}" ]; then
if [ "$(find "${serverfiles}" -not -user "$(whoami)" | wc -l)" -ne "0" ]; then
filesownissue=1
fi
fi
if [ "${selfownissue}" == "1" ]||[ "${funcownissue}" == "1" ]||[ "${filesownissue}" == "1" ]; then

Hello, I use my rust servers with full acl and these rules aren't in according to POSIX ACL standard.

As example, in a Apache server, the right way to manage FTP (according to POSIX ACL standard) is to create one user per real person and give setgid bit to shared folder. Then users can upload in this directory with shared group ownership but user ownership is set as uploader. So you can give access to Linux users to upload and www-data keep the rights to read/write by group access. https://www.gnu.org/software/coreutils/manual/html_node/Directory-Setuid-and-Setgid.html

But these rules are blocking the server because my users are legitimatly uploading in lgsm server directory. Nothing about any root issue that is explained in FAQ.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions