0

Is there any way that creater can create folder or file and he can give access to users but folder should not be accessible to admin/root user.Only authenticated user can access that.

1
  • 5
    You don't trust your system administrator? In that case, you'd better move your project to another system. The root user can always bypass any system permissions. The only way you could "hide" stuff from root would be to keep it encrypted (i.e. keep it encrypted and never decrypt it on that system). Since running on a system with an untrusted root user is equivalent to running on a compromised server, you never know what the root user can see or not see (keylogging of passwords etc.). – Kusalananda Jul 4 '19 at 12:02
1

No, it is not possible using Linux File Permissions.

Admin/root has access to any file and directory on your system. You could use encryption (e.g. a Luks container).

3
  • 1
    Well, encryption practically speaking means it is possible, no? – leftaroundabout Jul 4 '19 at 12:05
  • not sure, will root can access mounted luks ? so that would be a limitation.... – pLumo Jul 4 '19 at 12:05
  • You're right, I clarified what I think OP meant ... – pLumo Jul 4 '19 at 12:07
0

By definition, the root user is supposed to have full rights to absolutely everything on the system : if everything goes wrong, root must be reliable.

You can create an administration group which you would assign to your system administrators. You could, then, use the linux permissions to precise the access rights to your folders.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.