Permissioning for Sage server folder - Page 2

stuckless · #21 01-25-2017, 01:49 PM

Quote:

Originally Posted by wayner

Speaking of this, does it make sense that stuff like Fanart is stored in the same folder structure (by default it is in server/userdata/Phoenix) as the binaries that run SageTV. Shouldn't this type of stuff go in a separate application data location? You may not want all other PCs to have write access to the core Sage files, but it is convenient to have write access to stuff like Fanart folders or other "data-type" of folders? For example, I would like to be able to easily move my Gemstone settings files from one server to another.

Maybe userdata should be in a different partition?

Quote:

Originally Posted by Fuzzy

if sage was designed today, then yes, app, config, and content would all be separated. This is mostly a legacy issue that has just never been dealt with. Sage was primarily developed for windows, and the core architecture was laid down before windows really had program and user space separation. The architecture just stuck around.

userdata/Phoenix/ is the "default" location, you can actually change that in the Sage configuration, if you wanted phoenix configurations to exist elsewhere.

SageTV, itself, relies heavily on the "current working directory", which makes it harder to seaparate things out, but yeah, ideally, it would be nice if sagetv "core" files (installed files) were in a one location, and everything else that is configured (properties, plugins, userdata, etc) was in a separate location.

EnterNoEscape · #22 01-25-2017, 02:35 PM

Quote:

Originally Posted by stuckless

userdata/Phoenix/ is the "default" location, you can actually change that in the Sage configuration, if you wanted phoenix configurations to exist elsewhere.

SageTV, itself, relies heavily on the "current working directory", which makes it harder to seaparate things out, but yeah, ideally, it would be nice if sagetv "core" files (installed files) were in a one location, and everything else that is configured (properties, plugins, userdata, etc) was in a separate location.

Separating things would be very ideal and would make the SageTV docker a lot lighter since you could separate the configuration from the binary. Sadly I'm sure this would be fraught with unforeseen issues. What I ideally would like to see is that SageTV provides the plugin with a path that it can use all for itself and then the plugins don't need to make these kinds of decisions. We could then go one step further and isolate plugins with their dependencies. After that, we could starting thinking about how we could run General plugins as their own isolated processes.

wayner · #23 01-25-2017, 02:59 PM

This sort of raises one issue that I will have to deal with - what is the best way to run SJQ in Sage Docker? I have an Ubuntu VM set up on the unRAID server - should I install the SJQ client on my Ubuntu VM or could I install it directly into the Sage Docker? I would likely be using stuff like Comskip and Handbrake jobs that are initiated by SJQ.

EnterNoEscape · #24 01-25-2017, 03:17 PM

Quote:

Originally Posted by wayner

This sort of raises one issue that I will have to deal with - what is the best way to run SJQ in Sage Docker? I have an Ubuntu VM set up on the unRAID server - should I install the SJQ client on my Ubuntu VM or could I install it directly into the Sage Docker? I would likely be using stuff like Comskip and Handbrake jobs that are initiated by SJQ.

I installed it and then installed the agent so that it's running within the SageTV JVM. I'm only using it for a daily premiers email though, so that might not be useful for everyone.

wayner · #25 01-25-2017, 03:42 PM

Just running JS or groovy code from the JVM shouldn't be an issue. I think it is more of a problem when you want to run an external binary like comskip or handbrake. With comskip the issue may be solved as I think Sean may include comskip in the docker.

jusjoken · #26 09-01-2017, 09:23 AM

I am just starting to checkout unRAID and I am having the same/similar issue writing/editing sagetv/server folder/files from Windows.

I can write/edit other appdata subfolders created by other dockers.

I can write/edit the appdata/sagetv folder (ie: I can in windows create a folder in that folder).

Once I go 1 more folder level down into appdata/sagetv/server I cannot edit files nor create a folder.

Here is my output of ls -l

Code:

root@MyNAS:/mnt/user/appdata/sagetv/server# ls -l
total 66764
drwxr-xr-x 1 nobody users        6 Aug 30 18:56 ChannelLogos/
drwxr-xr-x 1 nobody users     4096 Sep  1 09:00 GeneratedThumbnails/
drwxrwxr-x 1 nobody users     1850 Sep  1 08:06 JARs/
drwxr-xr-x 1 nobody users     4096 Sep  1 09:00 PluginInstallers/
-rwxrwxr-x 1 nobody users    17813 Aug 10 06:49 PredefinedDVBC.frq*
-rwxrwxr-x 1 nobody users     5957 Aug 10 06:49 PredefinedDVBS.frq*
-rwxrwxr-x 1 nobody users   113505 Aug 10 06:49 PredefinedDVBT.frq*
-rwxrwxr-x 1 nobody users    45945 Aug 10 06:49 PredefinedScan.frq*
-rwxrwxr-x 1 nobody users     6950 Aug 10 06:49 PredefinedScanCable.frq*
-rwxrwxr-x 1 nobody users       63 Aug 10 06:49 PredefinedScanSat.frq*
-rwxrwxr-x 1 nobody users     4011 Aug 10 06:49 RemoteClients.properties.default                     s*
drwxrwxr-x 1 nobody users       14 Sep  1 09:02 STVs/
-rw-rw-r-- 1 nobody users  5462135 Aug 10 06:49 Sage.jar
-rw-r--r-- 1 nobody users    96765 Sep  1 10:02 Sage.properties
-rw-r--r-- 1 nobody users    96765 Sep  1 10:02 Sage.properties.autobackup
-rwxrwxr-x 1 nobody users     6576 Aug 10 06:49 Sage.properties.defaults*
-rw-r--r-- 1 nobody users      634 Aug 30 18:56 SageTVLocator.private.key
-rw-r--r-- 1 nobody users      162 Aug 30 18:56 SageTVLocator.public.key
-rw-r--r-- 1 nobody users   585433 Aug 30 18:56 SageTVPlugins.xml
-rw-r--r-- 1 nobody users    76456 Aug 30 18:56 SageTVPluginsV9.xml
-rw-r--r-- 1 nobody users 19841669 Aug 31 19:27 Wiz.bak
-rw-r--r-- 1 nobody users 19584212 Sep  1 08:39 Wiz.bin
drwxr-xr-x 1 nobody users       37 Aug 30 19:00 backups/
drwxr-xr-x 1 nobody users       79 Sep  1 09:00 clients/
-rwxrwxr-x 1 nobody users  8055424 Aug 10 06:49 ffmpeg*
-rw-r--r-- 1 nobody users   644917 Sep  1 08:06 filetracker.properties
-rw-r--r-- 1 nobody users   644813 Sep  1 08:06 filetracker.properties.autobacku                     p
drwxr-xr-x 1 nobody users     4096 Sep  1 09:00 fontcache/
drwxrwxr-x 1 nobody users      302 Aug 30 19:00 fonts/
drwxrwxr-x 1 nobody users      102 Aug 30 19:00 irtunerplugins/
drwxr-xr-x 1 nobody users       22 Sep  1 10:01 jetty/
-rwxrwxr-x 1 nobody users   135118 Aug 10 06:49 jpegtran*
-rwxrwxr-x 1 nobody users   274320 Aug 10 06:49 libDVBCapture.so*
-rwxrwxr-x 1 nobody users    23138 Aug 10 06:49 libFirewireCapture.so*
-rwxrwxr-x 1 nobody users    18465 Aug 10 06:49 libFreetypeFontJNI.so*
-rwxrwxr-x 1 nobody users   493226 Aug 10 06:49 libHDHomeRunCapture.so*
-rwxrwxr-x 1 nobody users   134046 Aug 10 06:49 libIVTVCapture.so*
-rwxrwxr-x 1 nobody users  1905497 Aug 10 06:49 libImageLoader.so*
-rwxrwxr-x 1 nobody users    12970 Aug 10 06:49 libJavaRemuxer2.so*
-rwxrwxr-x 1 nobody users    59904 Aug 10 06:49 libMPEGParser.so*
-rwxrwxr-x 1 nobody users    23564 Aug 10 06:49 libMpeg2Transcoder.so*
-rwxrwxr-x 1 nobody users   375320 Aug 10 06:49 libNativeCore.so*
-rwxrwxr-x 1 nobody users    12831 Aug 10 06:49 libPVR150Input.so*
-rwxrwxr-x 1 nobody users    30183 Aug 10 06:49 libSage.so*
-rwxrwxr-x 1 nobody users   372294 Aug 10 06:49 libTSnative.so*
-rwxrwxr-x 1 nobody users  5625949 Aug 10 06:49 libavcodec-minimal.so.52*
-rwxrwxr-x 1 nobody users   780019 Aug 10 06:49 libavformat-minimal.so.52*
-rwxrwxr-x 1 nobody users   257401 Aug 10 06:49 libavutil-minimal.so.50*
-rwxrwxr-x 1 nobody users   142699 Aug 10 06:49 libjtux.so*
-rwxrwxr-x 1 nobody users    26624 Aug 10 06:49 libswscale.so*
drwxr-xr-x 1 nobody users      132 Sep  1 08:26 logs/
drwxr-xr-x 1 nobody users       20 Sep  1 09:02 plugins/
drwxrwxr-x 1 nobody users    36864 Aug 30 19:00 remotes/
-rwxr-xr-x 1 nobody users       28 Sep  1 10:01 sagesettings*
-rwxr-xr-x 1 nobody users       28 Aug 30 19:20 sagesettings.old*
-rw-r--r-- 1 nobody users   130078 Sep  1 10:17 sagetv_0.txt
-rw-r--r-- 1 nobody users   101721 Sep  1 10:01 sagetv_1.txt
-rw-r--r-- 1 nobody users   930042 Sep  1 10:00 sagetv_2.txt
-rw-r--r-- 1 nobody users   375566 Sep  1 08:25 sagetv_3.txt
-rw-r--r-- 1 nobody users      287 Sep  1 08:03 sagetvmsgs.log
-rw-r--r-- 1 nobody users       49 Aug 30 19:15 sdauth
-rw-r--r-- 1 nobody users   593826 Aug 31 19:27 sdmd5prog
-rw-r--r-- 1 nobody users    47512 Aug 31 19:27 sdmd5sched
-rwxrwxr-x 1 nobody users     1310 Aug 10 06:49 startsage*
-rwxrwxr-x 1 nobody users     2060 Aug 10 06:49 startsagecore*
-rwxrwxr-x 1 nobody users     1435 Aug 10 06:49 stopsage*
drwxr-xr-x 1 nobody users       49 Sep  1 09:02 userdata/
-rw-r--r-- 1 nobody users    12049 Sep  1 09:49 weather_underground_cache.proper                     ties
root@MyNAS:/mnt/user/appdata/sagetv/server#

Any thoughts?

k

stuckless · #27 09-01-2017, 10:24 AM

Did you create a user in unRAID and are you connecting as that user, or, is it setup as a public share?

Your permissions seem to be correct, (ie, user=nobody, group=users).

I don't have a windows machine at the moment to test. Can you a ls -al on the directory where you can write? this is definately permission related, just not sure whats up.

jusjoken · #28 09-01-2017, 11:43 AM

I did not create any extra unraid users. Although I do see a user "birch" there ...perhaps I created that earlier.

appdata share is set to Public

here is the output for the sagetv folder and the appdata folder. Note the folder called testfolder which I created from Windows so no issue at that level.

Code:

root@MyNAS:/mnt/user/appdata/sagetv# ls -al
total 0
drwxrwxrwx 1 nobody users  32 Sep  1 12:37 ./
drwxrwxrwx 1 nobody users  12 Sep  1 10:00 ../
drwxr-xr-x 1 nobody users  32 Sep  1 11:00 .cache/
drwxr-xr-x 1 nobody users  19 Sep  1 09:02 .java/
drwxr-xr-x 1 nobody users  48 Aug 30 19:00 .oracle_jre_usage/
drwxr-xr-x 1 nobody users 268 Sep  1 11:00 server/
drwxrwxrwx 1 birch  users   0 Sep  1 12:37 testfolder/
root@MyNAS:/mnt/user/appdata/sagetv# cd ..
root@MyNAS:/mnt/user/appdata# ls -al
total 20
drwxrwxrwx 1 nobody users   12 Sep  1 10:00 ./
drwxrwxrwx 1 nobody users   52 Aug 30 20:00 ../
drwxrwxrwx 1 nobody users 4096 Jul 12 16:00 crushftp/
drwxrwxrwx 1 nobody users   28 Jul 12 16:00 filezilla/
drwxrwxrwx 1 nobody users  116 Jul 12 09:00 kde/
drwxrwxrwx 1 nobody users   59 Sep  1 09:01 mine/
drwxrwxrwx 1 nobody users   10 Aug  5 14:37 minecraft-server/
drwxrwxrwx 1 nobody users  201 Jul  7 13:00 openvpn-as/
drwxrwxrwx 1 nobody users   26 Jul 30 16:00 rust/
drwxrwxrwx 1 nobody users   32 Sep  1 12:37 sagetv/

Hopefully this helps to narrow the issue.

k

BobPhoenix · #29 09-01-2017, 05:11 PM

I can delete files in my appdata/sagetv/server directory from my Windows laptop. I have 9.1.5 installed.

Code:

-rwxr-xr-x 1 nobody users        28 Jul 15 21:42 sagesettings.old*
-rw-r--r-- 1 nobody users   6518713 Sep  1 17:54 sagetv_0.txt
-rw-r--r-- 1 nobody users  20000066 Sep  1 16:01 sagetv_1.txt
-rw-r--r-- 1 nobody users  20014217 Sep  1 15:54 sagetv_2.txt
-rw-r--r-- 1 nobody users  20170179 Sep  1 15:50 sagetv_3.txt
-rw-r--r-- 1 nobody users  20157610 Sep  1 15:46 sagetv_4.txt
-rw-r--r-- 1 nobody users  20883752 Sep  1 15:43 sagetv_5.txt
-rw-r--r-- 1 nobody users  20299600 Sep  1 15:35 sagetv_6.txt
-rw-r--r-- 1 nobody users  20091845 Sep  1 15:26 sagetv_7.txt
-rw-r--r-- 1 nobody users  21026183 Sep  1 15:24 sagetv_8.txt
-rw-r--r-- 1 nobody users  20009505 Sep  1 15:21 sagetv_9.txt

I just deleted sagetv_9.txt from my laptop:

Code:

-rwxr-xr-x 1 nobody users        28 Jul 15 21:42 sagesettings.old*
-rw-r--r-- 1 nobody users   6535276 Sep  1 18:00 sagetv_0.txt
-rw-r--r-- 1 nobody users  20000066 Sep  1 16:01 sagetv_1.txt
-rw-r--r-- 1 nobody users  20014217 Sep  1 15:54 sagetv_2.txt
-rw-r--r-- 1 nobody users  20170179 Sep  1 15:50 sagetv_3.txt
-rw-r--r-- 1 nobody users  20157610 Sep  1 15:46 sagetv_4.txt
-rw-r--r-- 1 nobody users  20883752 Sep  1 15:43 sagetv_5.txt
-rw-r--r-- 1 nobody users  20299600 Sep  1 15:35 sagetv_6.txt
-rw-r--r-- 1 nobody users  20091845 Sep  1 15:26 sagetv_7.txt
-rw-r--r-- 1 nobody users  21026183 Sep  1 15:24 sagetv_8.txt
-rw-r--r-- 1 nobody users         0 Sep  1 15:31 sagetvmsgs.log

The permissions on the server directory:

Code:

total 0
drwxrwxrwx 1 nobody users   82 Jul 15 21:43 ./
drwxrwxrwx 1 nobody users   12 Jul 15 21:38 ../
drwxr-xr-x 1 nobody users   20 Jul 15 21:43 .cache/
drwxr-xr-x 1 nobody users   10 Jul 15 21:43 .java/
drwxr-xr-x 1 nobody users   52 Jul 15 21:39 .oracle_jre_usage/
drwxr-xr-x 1 nobody users   36 Jul 15 21:39 comskip/
drwxrwxr-x 1 nobody users 3272 Sep  1 17:56 server/

Copied sagetv_8.txt then edited and removed all the text with notepad2 from my laptop:

Code:

-rwxr-xr-x 1 nobody users        28 Jul 15 21:42 sagesettings.old*
-rw-r--r-- 1 nobody users   6556056 Sep  1 18:07 sagetv_0.txt
-rw-r--r-- 1 nobody users  20000066 Sep  1 16:01 sagetv_1.txt
-rw-r--r-- 1 nobody users  20014217 Sep  1 15:54 sagetv_2.txt
-rw-r--r-- 1 nobody users  20170179 Sep  1 15:50 sagetv_3.txt
-rw-r--r-- 1 nobody users  20157610 Sep  1 15:46 sagetv_4.txt
-rw-r--r-- 1 nobody users  20883752 Sep  1 15:43 sagetv_5.txt
-rw-r--r-- 1 nobody users  20299600 Sep  1 15:35 sagetv_6.txt
-rw-r--r-- 1 nobody users  20091845 Sep  1 15:26 sagetv_7.txt
-rw-rw-rw- 1 nobody users        19 Sep  1 18:07 sagetv_8\ -\ Copy.txt
-rw-r--r-- 1 nobody users  21026183 Sep  1 15:24 sagetv_8.txt
-rw-r--r-- 1 nobody users         0 Sep  1 15:31 sagetvmsgs.log

sagetv_8 - Copy.txt:

Code:

I edited this file

So long story short I'm not having any problems deleting/editing files on my server. I have NO users defined on it and never have had any on this one. Don't know if this helps or not.

I did edit it from \\unRAIDServer\cache\appdata\sagetv\server rather than from a user share like \\unRAIDServer\appdata\sagetv\server. Don't know if that helps either

Fuzzy · #30 09-01-2017, 05:28 PM

I'm guessing the 'sagetv/testfolder' is the file you created from windows, correct? It was apparently created by birch:users, NOT by nobody:users, so windows, via samba, is apparently accessing the share as birch. This is a problem, because sage sets the permissions on the Sage.properties file as 655, so ONLY nobody:users can edit it (other members of the :users group cannot, neither can non :users users).

I honestly have no idea how to see or control what user samba is using.

jusjoken · #31 09-01-2017, 07:24 PM

Quote:

Originally Posted by BobPhoenix

I can delete files in my appdata/sagetv/server directory from my Windows laptop. I have 9.1.5 installed.

Code:

-rwxr-xr-x 1 nobody users        28 Jul 15 21:42 sagesettings.old*
-rw-r--r-- 1 nobody users   6518713 Sep  1 17:54 sagetv_0.txt
-rw-r--r-- 1 nobody users  20000066 Sep  1 16:01 sagetv_1.txt
-rw-r--r-- 1 nobody users  20014217 Sep  1 15:54 sagetv_2.txt
-rw-r--r-- 1 nobody users  20170179 Sep  1 15:50 sagetv_3.txt
-rw-r--r-- 1 nobody users  20157610 Sep  1 15:46 sagetv_4.txt
-rw-r--r-- 1 nobody users  20883752 Sep  1 15:43 sagetv_5.txt
-rw-r--r-- 1 nobody users  20299600 Sep  1 15:35 sagetv_6.txt
-rw-r--r-- 1 nobody users  20091845 Sep  1 15:26 sagetv_7.txt
-rw-r--r-- 1 nobody users  21026183 Sep  1 15:24 sagetv_8.txt
-rw-r--r-- 1 nobody users  20009505 Sep  1 15:21 sagetv_9.txt

I just deleted sagetv_9.txt from my laptop:

Code:

-rwxr-xr-x 1 nobody users        28 Jul 15 21:42 sagesettings.old*
-rw-r--r-- 1 nobody users   6535276 Sep  1 18:00 sagetv_0.txt
-rw-r--r-- 1 nobody users  20000066 Sep  1 16:01 sagetv_1.txt
-rw-r--r-- 1 nobody users  20014217 Sep  1 15:54 sagetv_2.txt
-rw-r--r-- 1 nobody users  20170179 Sep  1 15:50 sagetv_3.txt
-rw-r--r-- 1 nobody users  20157610 Sep  1 15:46 sagetv_4.txt
-rw-r--r-- 1 nobody users  20883752 Sep  1 15:43 sagetv_5.txt
-rw-r--r-- 1 nobody users  20299600 Sep  1 15:35 sagetv_6.txt
-rw-r--r-- 1 nobody users  20091845 Sep  1 15:26 sagetv_7.txt
-rw-r--r-- 1 nobody users  21026183 Sep  1 15:24 sagetv_8.txt
-rw-r--r-- 1 nobody users         0 Sep  1 15:31 sagetvmsgs.log

The permissions on the server directory:

Code:

total 0
drwxrwxrwx 1 nobody users   82 Jul 15 21:43 ./
drwxrwxrwx 1 nobody users   12 Jul 15 21:38 ../
drwxr-xr-x 1 nobody users   20 Jul 15 21:43 .cache/
drwxr-xr-x 1 nobody users   10 Jul 15 21:43 .java/
drwxr-xr-x 1 nobody users   52 Jul 15 21:39 .oracle_jre_usage/
drwxr-xr-x 1 nobody users   36 Jul 15 21:39 comskip/
drwxrwxr-x 1 nobody users 3272 Sep  1 17:56 server/

Copied sagetv_8.txt then edited and removed all the text with notepad2 from my laptop:

Code:

-rwxr-xr-x 1 nobody users        28 Jul 15 21:42 sagesettings.old*
-rw-r--r-- 1 nobody users   6556056 Sep  1 18:07 sagetv_0.txt
-rw-r--r-- 1 nobody users  20000066 Sep  1 16:01 sagetv_1.txt
-rw-r--r-- 1 nobody users  20014217 Sep  1 15:54 sagetv_2.txt
-rw-r--r-- 1 nobody users  20170179 Sep  1 15:50 sagetv_3.txt
-rw-r--r-- 1 nobody users  20157610 Sep  1 15:46 sagetv_4.txt
-rw-r--r-- 1 nobody users  20883752 Sep  1 15:43 sagetv_5.txt
-rw-r--r-- 1 nobody users  20299600 Sep  1 15:35 sagetv_6.txt
-rw-r--r-- 1 nobody users  20091845 Sep  1 15:26 sagetv_7.txt
-rw-rw-rw- 1 nobody users        19 Sep  1 18:07 sagetv_8\ -\ Copy.txt
-rw-r--r-- 1 nobody users  21026183 Sep  1 15:24 sagetv_8.txt
-rw-r--r-- 1 nobody users         0 Sep  1 15:31 sagetvmsgs.log

sagetv_8 - Copy.txt:

Code:

I edited this file

So long story short I'm not having any problems deleting/editing files on my server. I have NO users defined on it and never have had any on this one. Don't know if this helps or not.

I did edit it from \\unRAIDServer\cache\appdata\sagetv\server rather than from a user share like \\unRAIDServer\appdata\sagetv\server. Don't know if that helps either

Do you have a nobody user on the windows machine?

I will try that as well as remove the birch user from unraid and see what happens.

k

jusjoken · #32 09-01-2017, 07:30 PM

My server folder....
drwxr-xr-x 1 nobody users 268 Sep 1 11:00 server/

Bob's server folder....
drwxrwxr-x 1 nobody users 3272 Sep 1 17:56 server/

I wonder why these would be different ? And if the difference is a cause of my issue. I do not yet understand these permissions so I guess I need to start googling to see.

k

jusjoken · #33 09-01-2017, 07:42 PM

I did 2 things and then tested and it is resolved (bad form...I know).

I deleted the "birch" user in unraid.

I added a nobody user on the windows machine.

It now works.

Not sure which was needed....but I may dig deeper and see if I can figure it out before this is my production sagetv machine.

k

jusjoken · #34 09-01-2017, 07:48 PM

I removed my nobody user from the windows machine and it still works.

I double checked on another windows machine and it works from there as well.

I believe my issue was the "birch" user on unraid was created by me when I first installed unraid but I never gave it any specific permissions and the "birch" user on the windows machine was matching and not allowing me access.

That's a guess but all is well now.

Thanks for pointing me in the right direction.

k

BobPhoenix · #35 09-01-2017, 08:33 PM

Glad you got it fixed.

And NO I do not have a nobody user on my laptop.

stuckless · #36 09-02-2017, 05:29 AM

Just for reference, for those that are not familiar with unix permissions.

Code:

drwxrwxr-x 1 nobody users       14 Sep  1 09:02 STVs/
-rw-rw-r-- 1 nobody users  5462135 Aug 10 06:49 Sage.jar
-rw-r--r-- 1 nobody users    96765 Sep  1 10:02 Sage.properties
-rw-r--r-- 1 nobody users    96765 Sep  1 10:02 Sage.properties.autobackup
-rwxrwxr-x 1 nobody users     6576 Aug 10 06:49 Sage.properties.defaults*

Unix uses a 3 tier permission system, User, Group, and World (or Everyone) with each each segment having 3 fields for Read, Write, and eXecute.

Permissions are read from left to right (visusally), so rw-rw-rw-, the first 3 are User, then middle 3 are Group and the last 3 are world. (last 3 being rw is generally considered bad, since, it means anyone can write to that file). A "dash" means the permission is not set.

So, if a permission has rw-r--r--, it means only the owner can read and write that file. Other users can read it, but cannot modify it (ie, write or delete it).

When a permission, drwxr--r--, has a 'd' leading, it means that it is a directory. Directories also will have an "x", not really for "execute" but meaning that you can change into that directory. If a permission doesn't have rwx at the group level, then generally it means only the owner can change into it, and read, it, write it, etc.

So, if you have a multi-user system, then using the Group permissions is key, if you want to share sometime between users. Sometimes people get frustrated with permissions and got, set everying to rwx rwx rwx meaning everyone can read write execute everything. This is bad. Typically you'd want to set rwx rwx r--, allowing the user and group to make changes, but, everyone else can only read.

In unRAID, I'm sure the users you create are automatically added to the "users" group, so, if things are setup as

Code:

drwxrwxr-x 1 nobody users       14 Sep  1 09:02 STVs/

that samba should allow a "birch" user to write to STVs directory, because he's in the "users" group. ("users" being the group name in unRAID).

Things like this, are problematic.

Code:

-rw-r--r-- 1 nobody users    96765 Sep  1 10:02 Sage.properties

Because only the "nobody" can modify/delete that file. People in the "users" group can read it, but not actually modify it.

You can temporarily fix this, by, issuing the command.

Code:

chmod 664 Sage.properties

or

Code:

chmod ug=rw Sage.properties

I won't explain too much about "why" 664 means rw-rw-r--, just that, in unix you eventually get to know that 7 = rwx, 6=rw-, and 4=r--. If you are really interested, you can google "linux permissions octal". The wikipedia page explains the permissions quite well. And, in the second command "ug=rw" mean set the User and Group permissions to be Read and Write.

After looking at the permissions in the posts, it occurs to me that I should set a UMASK (basically a permission mask) of 0002 (umask is complicated, I won't explain it here) so that when files are created inside the docker container, that they automatically get the permissions of rw-rw-r--, ensuring that the Group "users" can always modify those files.

And yeah, I know I left out a bunch about sticky bits, etc, but, this should be enough for most people to decipher permissions when they ls -l.

Fuzzy · #37 09-02-2017, 09:18 AM

Quote:

Originally Posted by stuckless

Just for reference, for those that are not familiar with unix permissions.

Code:

drwxrwxr-x 1 nobody users       14 Sep  1 09:02 STVs/
-rw-rw-r-- 1 nobody users  5462135 Aug 10 06:49 Sage.jar
-rw-r--r-- 1 nobody users    96765 Sep  1 10:02 Sage.properties
-rw-r--r-- 1 nobody users    96765 Sep  1 10:02 Sage.properties.autobackup
-rwxrwxr-x 1 nobody users     6576 Aug 10 06:49 Sage.properties.defaults*

Unix uses a 3 tier permission system, User, Group, and World (or Everyone) with each each segment having 3 fields for Read, Write, and eXecute.

Permissions are read from left to right (visusally), so rw-rw-rw-, the first 3 are User, then middle 3 are Group and the last 3 are world. (last 3 being rw is generally considered bad, since, it means anyone can write to that file). A "dash" means the permission is not set.

So, if a permission has rw-r--r--, it means only the owner can read and write that file. Other users can read it, but cannot modify it (ie, write or delete it).

When a permission, drwxr--r--, has a 'd' leading, it means that it is a directory. Directories also will have an "x", not really for "execute" but meaning that you can change into that directory. If a permission doesn't have rwx at the group level, then generally it means only the owner can change into it, and read, it, write it, etc.

So, if you have a multi-user system, then using the Group permissions is key, if you want to share sometime between users. Sometimes people get frustrated with permissions and got, set everying to rwx rwx rwx meaning everyone can read write execute everything. This is bad. Typically you'd want to set rwx rwx r--, allowing the user and group to make changes, but, everyone else can only read.

In unRAID, I'm sure the users you create are automatically added to the "users" group, so, if things are setup as

Code:

drwxrwxr-x 1 nobody users       14 Sep  1 09:02 STVs/

that samba should allow a "birch" user to write to STVs directory, because he's in the "users" group. ("users" being the group name in unRAID).

Things like this, are problematic.

Code:

-rw-r--r-- 1 nobody users    96765 Sep  1 10:02 Sage.properties

Because only the "nobody" can modify/delete that file. People in the "users" group can read it, but not actually modify it.

You can temporarily fix this, by, issuing the command.

Code:

chmod 664 Sage.properties

or

Code:

chmod ug=rw Sage.properties

I won't explain too much about "why" 664 means rw-rw-r--, just that, in unix you eventually get to know that 7 = rwx, 6=rw-, and 4=r--. If you are really interested, you can google "linux permissions octal". The wikipedia page explains the permissions quite well. And, in the second command "ug=rw" mean set the User and Group permissions to be Read and Write.

After looking at the permissions in the posts, it occurs to me that I should set a UMASK (basically a permission mask) of 0002 (umask is complicated, I won't explain it here) so that when files are created inside the docker container, that they automatically get the permissions of rw-rw-r--, ensuring that the Group "users" can always modify those files.

And yeah, I know I left out a bunch about sticky bits, etc, but, this should be enough for most people to decipher permissions when they ls -l.

I was just going to suggest looking into what determines the permissions safe uses in its created files, and changing it to be group rw. I honestly had no idea where that was determined though.

graywolf · #38 09-02-2017, 09:30 AM

Quote:

Originally Posted by stuckless

I won't explain too much about "why" 664 means rw-rw-r--

Excellent explaination on Unix permissions Stuckless

For those interested.
r (read)=4
w (write)=2
x (execute)=1

So for each "grouping" (User, Group, Others) you add the values to get the Octal value

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
One Folder In Windows ==> Multi Folders In Folder View?	PeteCress	Diamond	0	07-09-2012 01:46 PM
Sage, WHS and folder duplication	Jesse	General Discussion	7	03-19-2009 03:11 PM
Changing Save Folder in Sage V5	tideman80	SageTV Software	1	11-08-2006 03:17 PM
Windows Server 2003 Share Folder	lambda379	SageTV Software	2	02-26-2006 09:19 AM
Sage Playing a DVD Folder	srothwell	SageTV Software	11	07-11-2004 03:30 PM

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)