Home Directory Permissions on New Files/Folders

Problem: When a user creates a file or folder in the root of their home folder (ie. not in their Documents or other default folder) it is given "read" access to the "others" POSIX permission. So, anyone browsing the "users" folder on the network can view those files or folders. I would like to change this behavior so that when a user creates a file or folder, it is only read/write for the user and nothing for everyone else.

umask is not really the correct thing to do in this case, as this resets the permissions for every file the user creates. Afaik, the umask setting has to be installed on every machine via the launchd-user.conf file (to contain simply: umask 002) (or whatever is appropriate for your facility), as umask is a property of the process, not the connection.
What might work better for your problem is make the homedirs world and group non-readable. That way the user creates files within their homedirs and anywhere below, but everyone else can't read them regardless of the files' permissions because the directory itself is unreadable.

Similar Messages

Read-only access permissions for new files/folders?

System:
Clean Install on new intel Xserve
10.4.8 Server w/ Open Directory
Windows clients can read/write completely fine...
Clients connecting using AFP (whether Standard or Kerberos authentication) can access files, but when new files/folders are created on the server, they register as full permissions for the user who created them, but not for the rest of the group.
The share(s) in question are set using POSIX from WGM: Full access for owner/group/everyone (changed it to this thinking it would help, but it does not). Of course, no one can make changes to a newly-created/deposited files/folders, which is just plain silly.
I can chmod the permissions recursively from a script (which fixes the problem, of course) on a regular basis so that its not (as much of) an issue, but there is still a 5-minute lag for the script to kick in, since we don't want to bombard the server with chmod requests every minute....which is unnecessary in the first place!
I have plenty of other setups which are identical but have no such issue...
Any reason why POSIX permissions on the share are being ignored from every user account?
Thanks,
k

"That's default posix behaviour no matter what access permissions you set on the sharepoint."
I'm afraid this is dead wrong. What matters most is how you set permissions on the share, not if you've chosen to inherit vs. using POSIX. POSIX is still used in inherit functions, though you can use ACL's to override them. In this case, ACL's are not being used on those shares (though we tried it).
After all, why would Apple (let alone anyone else) even offer the ability to change POSIX permissions on a share if it didn't have any effect? That would be somewhat contradictory in nature.
Like I said before, I have several other installations which are identically setup that have no such issues.
As for Windows, it is also not set to inherit permissions; we're setting those explicitly. And they work fine.
Any other ideas?
Thanks,
k

Wrong home directory permissions for new users

Hi everyone.
I reinstalled my laptop the other day and ran into a rather strange problem: after a system update new users had their permissions totally screwed. It took me 3-4 reinstalls to notice, as i was also playing with lvm2 &co. Anyway, on fresh installations from either 2008.06 or 2009.02, everything works fine. As soon as i update to the latest package versions (including 2.6.29 kernel) and create a new user, permissions on the new home directory are screwed up to the point where the user can't access it.
Old directory permissions:
drwx------ 33 jasn users 4,0K 17. Apr 13:21 jasn
drwx------ 2 root root 16K 17. Apr 12:15 lost+found
New directory permissions:
drw-rw--w- 2 jasm users 4,0K 17. Apr 13:43 jasm
drwx------ 33 jasn users 4,0K 17. Apr 13:21 jasn
drwx------ 2 root root 16K 17. Apr 12:15 lost+found
Logging in to "jasm" results in
No directory, logging in with HOME=/
[jasm@host /]$
The whole mess can be fixed by changing the permissions on the home directory, but all that can't be on purpose, can it? I also don't know which package update (if it even was caused by one) causes this behaviour and if this only happens to me, so i didn't file a bug report.
Has anyone already seen this? I solved it after 1.5 days of puzzled (and strangely unsuccessful) googling and reinstalling, so perhaps someone who runs into the same problem can use this to fix it.
Last edited by JASN (2009-04-17 17:09:34)

umask is not really the correct thing to do in this case, as this resets the permissions for every file the user creates. Afaik, the umask setting has to be installed on every machine via the launchd-user.conf file (to contain simply: umask 002) (or whatever is appropriate for your facility), as umask is a property of the process, not the connection.
What might work better for your problem is make the homedirs world and group non-readable. That way the user creates files within their homedirs and anywhere below, but everyone else can't read them regardless of the files' permissions because the directory itself is unreadable.

Permissions of new files

Running Leopard Server AFP shares need to know is there a way to force new files copied to AFP shares to get the folders permissions applied automatically currently I have to propagate other wise user B cannot open content created and copied to server by user a

The short story, you should use ACLs to setup permissions the way you choose.
Any new files/folders will inherit permissions from their parent.
A few resources:
Starting on page 17 of this manual
http://manuals.info.apple.com/enUS/FileServerAdminv10.6.pdf
Pay attention to ACLs and inheritance.
And more
http://docs.info.apple.com/article.html?path=ServerAdmin/10.5/en/c1fs4.html
http://www.bresink.com/osx/193281/Docs-en/ACL.html
And of course, search the discussion forums for: ACL, Inherit, permissions, etc.
Jeff

How to create new file folders?

I'm can no longer create new file folders. Can someone help me? I've tried everything.

Anice, welcome to the forum.
When requesting help, you should always include the make/model of the computer and/or monitor. This information is necessary for us to review the specifications of them.
Signature:
HP TouchPad - 1.2 GHz; 1 GB memory; 32 GB storage; WebOS/CyanogenMod 11(Kit Kat)
HP 10 Plus; Android-Kit Kat; 1.0 GHz Allwinner A31 ARM Cortex A7 Quad Core Processor ; 2GB RAM Memory Long: 2 GB DDR3L SDRAM (1600MHz); 16GB disable eMMC 16GB v4.51
HP Omen; i7-4710QH; 8 GB memory; 256 GB San Disk SSD; Win 8.1
HP Photosmart 7520 AIO
++++++++++++++++++
**Click the Thumbs Up+ to say 'Thanks' and the 'Accept as Solution' if I have solved your problem.**
Intelligence is God given; Wisdom is the sum of our mistakes!
I am not an HP employee.

Repair Home Directory Permissions in Lion

I currently have my home directory on it's own physical disk (not in the default location on my OS drive).
When I try to "reset home directory permissions" against my user account in OS X Lion, nothing happens. When I do it for a user who has his home directory on the OS drive, everything works like a champ. The same thing happens under Snow Leopard as well, and I've been trying to track down a solution to this for a long time.
Does anyone know how to fix this? I tried setting the permissions, ACL's, extended atttributes, etc to the best of my ability using Unix commands, and I'm not really having any issues at the moment, but I'd like to be able to set everything back to the way it should be in my home directory.
Also, I don't have enough space on my OS drive to move my home directory back to the default location in order to do the reset.
Any help would be appreciated.
Bobby

If you go into System Preferences / Users, you can right click on your User account and choose advanced options. In there, you are able to point your users directory to any disk (or folder) on your machine. I chose to move my home directory to a separate drive in my Mac Pro to make rebuilds easier. Now if I want to reinstall my OS, I simply blow the existing OS away, format the OS disk, and once a fresh OS is installed, I just re-point my account to the existing drive where my home directory is, and all is cool. It's definitely a supported configuration by Apple, and many people do it. It's just aggravating that their "reset home directory permissions" routine doesn't like it.
My OS drive is a 128gb SSD, and my home directory sits on a 3tb HDD. From a performance and separation perspective it's perfect.
Bobby

Need a perl script which monitors a network folder and sends email when new files/folders arrived...

I need a perl script (or something else better) which monitors a network folder and sends email when new files/folders arrived. I tried it in Automator but failed.
Thanks!

Yes. I tried it. But whenever I restart m Mac, the watch folder doesn't work until I reconnect to network or run the Automator... I need a simple system that automatically connects to the network and monitor the folder, even I restart the Mac.
Thanks!

Home Directory Synchronisation and "DS_Store" files

I have five clients on Tiger connected to a Tiger server. All clients are 10.4.8.
Initially I turned Home Synchronising on, but since turned it off, realising I don't really need it. One of the clients, with the biggest profile, still keeps synchronising files. They often get the following message in relation to "DS_Store" files:
You do not have permission to synchronize this file. You can check
your permissions in the Info window in the Finder
Name: .DS_Store
Size: 6.15 KB
Modified: 09/02/2007 10:09 AM
Location: Documents/Work - laptop/office/folders/.DS_Store
My questions:
1. As I haven't apparently turned off Home Sync'ing (via the Workgroup application), what else can I check?
2. What does a DS_Store file do?
3. Will it kill something if I delete all the DS_Store files I can find, so they no longer synchronise?
4. Alternatively, how can I enable DS_Store files to be replicated?
Thanks,
Sam

A .DS_Store file is an invisible what controls what you see in every folder/directory. The most imoportant one is the one which controls the Desktop folder in your home directory. The Desktop folder is always open—it's what you see on your desktop when the Finder is running. If you delete the file, for any folder, including the Desktop, it'll be recreated as soon as you reopen the folder or relaunch the Finder, in the case of the Desktop .DS_Store file.
I can't answer your query WRT tp synchronization or servers. You might post the problem to the Servers forum.

Home directory permissions help

Two questions:
1) the default permissions for my account appears to be set to give me Read & Write permissions, and all others get Read Only? I'd like the default to be that all others get None as a default - do I use the umask command to do this, and if so, with what settings?
2) One folder in my home directory is set such that the Guest account has Read Only. But I cannot seem to alter this - from my home directory, there are only two permissions entries - I have Read & Write, and Everyone gets None - the Guest entry does not even show, and there is no user 'Guest' I can select. But if I am logged in under the Guest account, and select permissions on that directory, I see three entries, including Guest having Read Only. How do I resolve this?

Most of the default (system created) folders in your user account are only readable by you. The exceptions are the Public (for file sharing) and Sites (for website sharing), which are readable by everyone. Folders that you have created will also be readable by others (this is the system default setting), so if you have placed them in the root directory of your user (outside of the default folders), others will be able to read them unless you change the permissions.
If you have altered the permissions on the default user folders, for example, by using "apply to enclosed items", you will need to do some repairs to restore the original permissions (the Disk Utility permissions repair will not repair anything in a user account). Apply to enclosed items... should never be used on a system created folder.
The Guest account only exists when you log into it - normal permissions include the owner, group, and everyone else.

Best way to put system and apps (home directory?) on new SSD?

I just installed a new 115 GB SSD in slot 2 of my MacPro (early 2008). I have not initialized yet. I want to make that my Boot Drive. I have Carbon Cloner and have cloned my entire old HD onto an external so far. What is the best way to get my system and apps onto the SSD. I'm guessing Carbon Cloner will let me clone parts of my HD and not make me clone all of it but I don't yet know how to do that. Do I just clone my apps folder and then my system folder one at a time? What do I do with the Library? I cannot clone my entire HD onto the SSD first because it will not fit and I do not want my data on there anyway. I have read that I should also put my home directory on the boot but this is now confusing me. I plan on partioning the erased HD into fast and slow, then putting my User folder from the external back on there. I am the only one using the computer so I do not have issues with Users and all my apps are in the main hard drive app folder but I have noticed that I have things in both my Library folders (main HD and my home). Should I put all items in one of them, main or home? before I do this? I never understood why I have items in both folders since I am the only user and all the apps are on main. Thanks.

Misfit138 wrote:
Gen2ly wrote:
I just did this and took notes so it might be your lucky day because I created a wiki page for it:
Restore from Configurations
Terrific job.
I would suggest changing the name to "System Restore from Configuration".
Thank you.
Done.

OOPS!! Reset Home Directory permissions

I accidently reset my home permissions. Now, I can't get into my home directory except as root. What command can I do to make every file in my home to be read/write accesable ONLY to punkrockguy and root?

Hmm, I had hoped the chmod didn't need to be applied recursive. You can try to use the 'find' command to make all files non-executable. From your home directory, run something like:
find -type f -exec chmod a-x "{}" ";"
See the find manpage for more details.
Of course you'll need to add the executable flag the files files you DO want to be executable, like the ones in your ~/bin and stuff called 'configure' and such.

Polling a particular directory, retrieving only new files

Hi,
I have a requirement of polling a particular directory, and retrieving all new files posted. Say, i have a file called file1 in a particular directory, i keep polling the same directory every "n" minutes or even seconds, and will try to fetch file1 only when there is a semaphore file called file1.ready exists for file1.
This is in Solaris.
How can this be implemented?. Any help will be greatly appreciated.
Thanks

Take a look at java.io.File which represents an abstract path such as a directory or file. You'll probably be particularly interested in File.exists().

Polling a particular directory, retrieve only new file(s)?

Hi,
I have a requirement of polling a particular directory, and retrieving all new files posted. Say, i have a file called file1 in a particular directory, i keep polling the same directory every "n" minutes or even seconds, and will try to fetch file1 only when there is a semaphore file called file1.ready exists for file1.
This is in Solaris.
How can this be implemented?. Any help will be greatly appreciated.
Thanks

you can use the file modified dates to figure out whats new and whats old.
May be you can compare them against the last time that you ran the process.

Can I and should I move my home directory to my new Thunderbolt RAID drive?

I have just purchased a Thunderbolt Promoise Pegasus Raid set to Raid5. I have never owned a RAID device before so i apologise if these questions seem strange or rudimentary.
I am running an internal 7200 RPM 1TB disc but I have heard that the Thunderbolt throughput is faster than even my internal drive. Is that the case?
If so...
Would it be possible/wise for me to move my home directory to the RAID?
Would it be possible/wise for me run the entire system from the RAID?
Finally, if I keep the system/home directory on the RAID, can I/shoud I use the RAID for Time Machine Backups?
Thanks in advance for any thoughts

Here's what I did:
Copied my home directory to the RAID (not NAS incidentally, but RAID via thunderbolt)
System Prefernces -> accounts
Unlock to make changes and control-click on the account you want to move.
In there you will see a home directory location. Change it to where your new home directory location is.
Restart.
You know it has worked if the new location icon is the familiar picture of a house.
Probably a good idea to have a fallback account you can log into in case something happens.
No issues with any software, plenty of room now on the internal drive ad everything works nice and snappy

Change Permissions Of All Files/Folders At Once?

I changed my User Name by deleting my old Account and creating this new one and now my thousands of Files and Folders have to each have their Ownership be manually switched from "unknown" to my new Name before being rewritable (and sometimes even just readable).

The final solution that worked for me in Yosemite OS X ver. 10.10.1 (thanks to old comm guy):
In Finder, rt click on the damaged folder and choose "Get Info"
In the pop up Info window:
At the bottom corner, unlock Sharing & Permissions
The following permissions should be set:
username set to Read & Write (if this is missing, add it using the + icon at the bottom left corner)
staff set to Read only
everyone set to Read only
Then and only then, click the gear icon at the bottom left corner near the + - icons.choose: Apply to enclosed items...
At the bottom corner, lock Sharing & Permissions

Home Directory Permissions on New Files/Folders

Similar Messages

Maybe you are looking for