On Thu, 2006-01-12 at 07:28 +1030, Tim wrote: > Paul Howarth: > >>> A user other than the owner that is in the same group as the file won't > >>> be able to read it, will they? > > Tim: > >> Argh, double negative logic, and it's 6am... > >> > >> If I create a test file as user and group "tim", then make it mode 404 > >> e.g. -r-----r-- 1 tim tim 5 Jan 12 06:04 permissions.text > >> User "test" in group "test" can read it (I've tested this). > >> > >> Are you saying that they should or shouldn't be able to do so? > > Paul Howarth: > > What about user "test" in group "tim"? > > Same results, as I expected. Not the same here, as I expected: $ ls -l testfile -r-----r-- 1 root cdwrite 9 Jan 11 22:13 testfile $ id uid=500(paul) gid=500(paul) groups=105(mock),500(paul),502(cdwrite),503(scanner) context=user_u:system_r:unconfined_t $ cat testfile cat: testfile: Permission denied $ I'm a member of the "cdwrite" group and can't access the file, but I would be able to if I wasn't a member of the group. Paul.