GNU bug report logs - #5826
[feature] chmod +S to setgid directories alike +X

Previous Next

Full log

View this message in rfc822 format

From: help-debbugs <at> gnu.org (GNU bug Tracking System)
To: Michał Górny <gentoo <at> mgorny.alt.pl>
Subject: bug#5826 closed by Bob Proulx <bob <at> proulx.com> (Re: bug#5826:
 [feature] chmod +S to setgid directories alike +X)
Date: Sat, 03 Apr 2010 19:59:02 +0000

[Message part 1 (text/plain, inline)]

This is an automatic notification regarding your bug report
which was filed against the coreutils package:

#5826: [feature] chmod +S to setgid directories alike +X

It has been closed by Bob Proulx <bob <at> proulx.com>.

Their explanation is attached below along with your original report.
If this explanation is unsatisfactory and you have not received a
better one in a separate message then please contact Bob Proulx <bob <at> proulx.com> by
replying to this email.


-- 
5826: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=5826
GNU Bug Tracking System
Contact help-debbugs <at> gnu.org with problems

[Message part 2 (message/rfc822, inline)]

From: Bob Proulx <bob <at> proulx.com>
To: Michał Górny <gentoo <at> mgorny.alt.pl>
Cc: 5826-done <at> debbugs.gnu.org
Subject: Re: bug#5826: [feature] chmod +S to setgid directories alike +X
Date: Sat, 3 Apr 2010 13:57:59 -0600

Michał Górny wrote:
> I would really appreciate if chmod supported setting setgid permissions
> on directories (and files already having such) recursively, much like
> '+X' does set executable permission. To match the '+X' one, I suggest
> using '+S' for that.

I suggest using 'find' for this.  And there is an advantage to using a
standard command.  It works anywhere.

  $ find . -type d -exec chmod g+s {} +

Also the setgid bit isn't like the execute bit.  They can't be directly
compared.  There are three execute bits.  The +X implements a not
completely trivial control flow.  If the file is a directory OR if the
file already had the user execute bit or the group execute bit or the
other execute bit set.  It is the three execute bits that makes it
non-trivial and the usefulness of the +X mode.  But by contrast
setting the setgid bit is very simple.  Just set it.  It is only one
bit.

Plus there are security ramifications to think about when setting the
setgid bit on files.  And the decisions are operating system
dependent.  On most systems scripts should never be suid/sgid.  And
even on systems where it is safe to do so I don't think setting the
suid/sgid bit on normal executables is something that should be done
lightly.

Bob

[Message part 3 (message/rfc822, inline)]

From: Michał Górny <gentoo <at> mgorny.alt.pl>
To: bug-coreutils <at> gnu.org
Subject: [feature] chmod +S to setgid directories alike +X
Date: Sat, 3 Apr 2010 13:04:25 +0200

Hello,

I would really appreciate if chmod supported setting setgid permissions
on directories (and files already having such) recursively, much like
'+X' does set executable permission. To match the '+X' one, I suggest
using '+S' for that.

-- 
Best regards,
Michał Górny

<http://mgorny.alt.pl>
<xmpp:mgorny <at> jabber.ru>

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.