How can I achieve this files & folders permissions scenario:
Consider these folder:
640 root apache /var/www/A/
640 root apache /var/www/
and this linux user:
uid=1000(user1) gid=1000(user1) groups=1000(user1)
I want to allow linux user
user1 read/write access JUST to folder A, BUT don't change folder A owner or group.
I have tried these scenarios but none of them were desirable:
user1will be able to read other files at
- hard-link a folder(ex. folder B) in
user1's home to
/var/www/A/and set proper permissions on folder B rather than A:
cons: hard-links to directories not possible on cross-devices.
cons: complexity of
user1may broke owner/group policy and/or permissions of folder A by human-error.