How do I give an admin user full rights to all home folders?

What is a good permission scheme for this scenario?

user administrator (from administrator group) has full access (read/write/execute) to /home folder
any other user (from users group, example: bob.users) has full access (read/write/execute) to his home folder only: /home/bob

So administrator has full rights to /home/any-user, but any-user only has full rights to his home folder.

marius

Posted 2011-10-02T10:04:07.467

Reputation: 3

If "administrator" = "root", this is already the case. – Kusalananda – 2011-10-02T10:55:01.487

Not the same thing, administrator is just a different user, from a different group – marius – 2011-10-02T11:10:44.657

Answers

Instead of chmod, see if your unix version and filesystem understand extended POSIX ACLs (Link refers to linux in specific, but basics should be applicable to other OSen that support them).

If you do, or if you can set up your system to understand them, you can simply say (for example:

setfacl -mR d:g:admingroup:rwx /home/
setfacl -mR g:admingroup:rwx /home/

And all users in the admingroup group will automatically have read/write access to everything in /home and subdirectories.

Shadur

Posted 2011-10-02T10:04:07.467

Reputation: 1 732