File Permissions ?

[Paul Howarth]

On Thu, 2006-01-12 at 07:28 +1030, Tim wrote:
> Paul Howarth:
> >>> A user other than the owner that is in the same group as the file won't
> >>> be able to read it, will they?
> 
> Tim: 
> >> Argh, double negative logic, and it's 6am...
> >> 
> >> If I create a test file as user and group "tim", then make it mode 404
> >> e.g. -r-----r--  1 tim  tim        5 Jan 12 06:04 permissions.text
> >> User "test" in group "test" can read it (I've tested this).
> >> 
> >> Are you saying that they should or shouldn't be able to do so?
> 
> Paul Howarth:
> > What about user "test" in group "tim"?
> 
> Same results, as I expected.

Not the same here, as I expected:

$ ls -l testfile
-r-----r--  1 root cdwrite 9 Jan 11 22:13 testfile
$ id
uid=500(paul) gid=500(paul)
groups=105(mock),500(paul),502(cdwrite),503(scanner)
context=user_u:system_r:unconfined_t
$ cat testfile
cat: testfile: Permission denied
$

I'm a member of the "cdwrite" group and can't access the file, but I
would be able to if I wasn't a member of the group.

Paul.