Novell OPEN ENTERPRISE SERVER 2 SP2 - PLANING AND IMPLEMENTATION GUIDE 11-10-2009 Implementation Manual page 220

Table 21-1
Feature
Administrative
principles
Default accessibility
Home directories—an
example of default
accessibility
Inheritance from
parents
Privacy
220 OES 2 SP2: Planning and Implementation Guide
POSIX vs. NSS/NCP File Security Models
POSIX / Linux
Permissions are individually controlled and
managed for each file and subdirectory.
Because of the nature of the POSIX
security model, users usually have read
rights to most of the system.
To make directories and files private,
permissions must be removed.
For more information on making existing
directories private, see
"Providing a Private Work Directory," on
page 196.
Users have permissions to see most of the
file system.
The contents of a few directories, such as
the /root home directory, can only be
viewed by the
Some system configuration files can be
read by everyone, but the most critical files,
such as
/etc/fstab
and modified by
By default, all users can see the names of
directories and files in home directories.
During LUM installation, you can specify
that newly created home directories will be
private.
For more information on making existing
home directories private, see
Section 17.4.2, "Providing a Private Work
Directory," on page
Nothing is inherited.
Granting permission to a directory or file
affects only the directory or file.
Because users have permissions to see
most of the file system for reasons stated
above, most directories and files are only
private when you make them private.
Section 17.4.2,
root user.
, can only be read
.
root
196.
Novell Trustee Model on OES 2
Trustee assignments are made to
directories and files and flow
down from directories to
everything below unless
specifically reassigned.
Users can see only the
directories and files for which
they are trustees (or members of
a group that is a trustee).
By default, only the system
administrator and the home
directory owner can see a home
directory. Files in the directory are
secure.
If users want to share files with
others, they can grant trustee
assignments to the individual
files, or they can create a shared
subdirectory and assign trustees
to it.
Rights are inherited in all child
subdirectories and files unless
specifically reassigned.
A trustee assignment can
potentially give a user rights to a
large number of subdirectories
and files.
Directories and files are private
by default.