4

I noticed that a lot of my programs run under the same user like (firefox,chromium,steam,etc...) and therefore should have the same permissions as this user, but I would prefer to limit their accesses.

For example I want none of them to have access to a specific backup directory except a backup process.

Can I somehow run those under another user who is limited but still use them on my kde session normally? (Which I assume can access all my main user's directories.)

  • 1
    What about chown root dir; chmod 700 dir? I.e. change owner to root and deny read from everyone else. – Al.G. Mar 18 '17 at 20:30
  • So i will give the ownership to root and add the privileged processes permission using a group? What if i want to limit accesses to the whole system except files relevant to the specific process? – jNull Mar 18 '17 at 20:38
  • I suppose you could have a separate user for this specific process which would only have access to the backup directory, though I haven't done it before. – Al.G. Mar 18 '17 at 22:12
  • 1
    This sounds like what Apparmor was created to solve – Andy Mar 19 '17 at 9:53
  • @Andy Apparmor seems to be my solution, i will read about it later, thank you very much! – jNull Mar 19 '17 at 10:01
1

Use setfacl:

setfacl -m u:backup-process-username:rwx backup-folder

This is an answer to a similar question:
https://askubuntu.com/a/809562/707299

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.