1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
|
Source: trustees
Maintainer: Piotr Roszatycki <dexter@debian.org>
Section: misc
Priority: extra
Standards-Version: 3.5.6
Build-Depends: grep-dctrl, yada (>= 0.9.9)
Package: trustees
Architecture: any
Pre-Depends: ${debconf:trustees:Depends}
Description: Advanced permission management system for Linux.
The main goal of Linux trustees project is to create an advanced permission
management system for linux. In fact, UNIX permission system is not suitable
for solution of very common tasks.
.
E.g., let a system administrator wants to create a directory that available
for some groups in write mode, for another groups - in read only. The files
in the directory and subdirectories should inherits the parent's behavior,
unless other is stated explicitly. Using standard UNIX (and Linux) security
model it is generally speaking impossible to implement the situation when
different groups have read/write and read/only permissions. This issue can be
resolved by ext2-fs ACL project, but the problem is that nobody wants to copy
mask or ACLs from parent directory to subdirectories either by hands or using
special scripts.
.
Using the trustees, you can resolve this problems just typing
[/device]/path:+group1:REBX
.
The solution proposed is mainly inspired by Novell Netware approach and Java
security API.
.
Special objects (called trustees) can be bounded to every file or directory.
Trustee object means that access to file or directory or directory with
subdirectories is granted (or denied) to certain user or group (or all except
user or group).
.
This package provides settrustee utility, which enables new privileges from
trustee.conf.
|
