From: Mark Wooding <mdw@distorted.org.uk>
Date: Sat, 3 Sep 2011 21:42:07 +0000 (+0100)
Subject: claim-dir, claim-mem-dir: userv gadget for claiming directories.
X-Git-Url: https://git.distorted.org.uk/~mdw/distorted-bits/commitdiff_plain/ba12327f41ad8773052b10970850b716677d3b5c?hp=ba12327f41ad8773052b10970850b716677d3b5c

claim-dir, claim-mem-dir: userv gadget for claiming directories.

Suppose there's a part of the filesystem namespace that you want users
to be able to claim bits of.  The usual approach is to make the top
directory of the subtree be world-writable and sticky, but this causes
no end of trouble: there's potential contention for the namespace, which
leads to security problems.

These tools provide an alternative approach: a userv service which makes
a directory named after and owned by the calling user, and with
restrictive permissions.  It doesn't set a group for the new directory,
but the caller can do that.
---