Mandriva - Folder permissions

[geolew]

Using Mandriva 2005LE and Samba 3.x and xp clients
I am a newbie, very very newbie

All works except...

created group called admins
added bill,george,bob to group
from root created directory with 0775 permissions
then reassigned -R root:admins ...

Users cannot access folders.
so I use -R 0775 /home/public

great, all can access folder, but after an hour or so the permissions get set back.

Do i have a chron job running that I don't know about.
How do I fix.

Ive manned chmod, chgrp etc , but permissions keep getting set back.

 

[smah]

Yes, ultimately it's being done in cron.hourly. I don't have a Mandriva box to check exactly what happens, but it was originally set by the 'security level' choice that was picked either during installation or subsequently from Control Center (my guess is that you chose 'higher' or 'paranoid'). Somewhere there's a function to fine tune each aspect of each of these security levels.

 

[geolew]

Thanks smah.

I will google for answer.
I will also poke around in Mandriva for security settings.

geolew

 

[geolew]

Found it. Googled and found.
In Mandriva setting I had set to highest, because it is a server in my small shop. A cron job is set automatically
to reset permissions.

/etc/cron.hourly/msec

For now I have renamed the file, later I will "pretend" to know what I am doing and modify code to leave my shares alone.

geolew

 

[geolew]

Nope. The msec file was just recreated. Not sure how or where this is done.

This will probably turn around and bite me later, but
I turned off cron.
{:^{

Is this a good idea? It seams to have resolved the problem for now.

Geolew

 

[Annihilannic]

Yes, it will bite you later, you need cron running for various regular system maintenance jobs such as log rotation and removal, temporary file cleanups, etc.

Annihilannic.

 

[geolew]

Thanks Annihilannic.

I did some more googleing and found draksec.
I have set my security seetting a notch lower
and added shorewall.
I will post back if this resolves my problems.

geolew.

 

[geolew]

Seems to have worked.
Shared directories remain shared.
Cron is back on.
Thnaks for all help for this newbie.

Geolew