Stop Using chmod 777 for One Extra User: Practical POSIX ACLs on Linux

<p>A deploy user needs to write to one directory owned by a service account. The ticket is two lines long. The fastest fix is <code>chmod 777</code>, and it works right up until someone asks who else can write there.</p> <p>The second-fastest fix is to add the user to the directory's group. That also works, with two side effects people forget: group membership is host-wide, so the user now has tha

Читать первоисточник →