hello
i have some questions about file permissions on a linkstation mini compact NAS. i'm new to linux so would appreciate any help.
i've setup a number of shares fine and have created local users no problem. all shares are windows and ftp enabled (from the LAN only)
the way i have permissions setup currently is that lets say i have 5 shares, A B C D and E.
all local users have read only access to shares A B C and D. No user (not even the built in admin account) has read/write access to A B or C.
share D is being used with syncback on windows vista. so syncback monitors one folder on the PC and keeps it synced with that share.
it does this via ftp using the built in admin account. so admin has read/write to this share, everyone else has read only
share E is a folder i use for uploading via buffalonas.com and so 2 local users have read/write to this share (again, admin
has no permissions at all here).
so my question really is ... is there any problem with the fact that pretty much all my shares are read only by local users? admin only has read/write to share D and NO permissions on anything else (not even read).
my intention is when i want to transfer any files to the NAS, to login to the web gui, assign the admin account read/write to the relevant share and then remove permissions afterwards.
i presume that when i log into the web gui as admin, i am then logged in as root? because even tho admin has no permission to the shares, i can still change permissions.
is there any risk with this strategy?
the reason i have it setup like this is for security of the data, plus i dont want syncback to go screwey and start deleting stuff from other shares with the admin account and also
i access the NAS via the internet so want it secure as possible.
thanks in advance
"so my question really is ... is there any problem with the fact thatpretty much all my shares are read only by local users?"
Nope.
"i presume that when i log into the web gui as admin, i am then logged in as root?"
Effectively, yes. Actually, no, admin is separate from the unix root account.
"is there any risk with this strategy?"
Not that i can see.