Path: utzoo!utgpu!news-server.csri.toronto.edu!mailrus!wuarchive!uunet!mcsun!ukc!axion!vision!chris From: chris@vision.UUCP (Chris Davies) Newsgroups: comp.databases Subject: Re: Bug creating a db in Informix Keywords: informix chgrp setgid Message-ID: <1073@vision.UUCP> Date: 5 Apr 90 10:14:15 GMT References: <1990Apr3.175133.12382@aqdata.uucp> Reply-To: chris@vision.UUCP (Chris Davies) Organization: VisionWare Ltd., Leeds, UK Lines: 31 In article <1990Apr3.175133.12382@aqdata.uucp> sullivan@aqdata.uucp (Michael T. Sullivan) writes: >I (as root) created a project directory for people to work in. I >gave the directory group rwx permission. Somebody in the group tried >to create a database in the project directory. It didn't work. The Ah! On the version of Informix we've got here (2.10.03B on Altos 1000 SysV.3) it runs "setgid" - i.e. the effective group privileges for a user using Informix are often that of the Informix Group itself (not the user's group). When I tried the situation above, setting the group to "informix" and the permissions to group rwx, it worked perfectly. However, this then leads on to the possibility that _anyone_ could create a database in this directory :-( No, I've no quick'n'easy solution to that one! >error message (as usual) was no help. I got a funny feeling and >changed the ownership of the directory to that of the person creating >the database. Sure enough, that worked. Note that this person had Yes, this would work. Since the effective group id is Informix, the only way a user would be able to write something into that directory would be as the owner (unless others permissions was rwx too). Regards, Chris -- VISIONWARE LTD | UK: chris@vision.uucp JANET: chris%vision.uucp@ukc 57 Cardigan Lane | US: chris@vware.mn.org OTHER: chris@vision.co.uk LEEDS LS4 2LE | BANGNET: ...{backbone}!ukc!vision!chris England | VOICE: +44 532 788858 FAX: +44 532 304676 -------------- "VisionWare: The home of DOS/UNIX/X integration" --------------