draft: Droits d'accès

2026-05-16 14:01:38 +02:00
parent 7402de8f04
commit 113060665c
3 changed files with 64 additions and 1 deletions
@@ -1 +1 @@
-{"readable":true,"books":{"\/book\/esp":3,"\/book\/les-commandes-linux":2,"\/book\/linux-architecture-des-dossiers":1},"as":[{"asn":"","name":"LAN","country":"","hits":12854},{"asn":"8075","name":"Cloud","country":"US","hits":826},{"asn":"14618","name":"AWS EC2 (us-east-1)","country":"US","hits":439},{"asn":"24940","name":"Hetzner","country":"FI","hits":396},{"asn":"16276","name":"OVH","country":"FR","hits":150},{"asn":"32934","name":"Meta Platforms Ireland Limited","country":"US","hits":118},{"asn":"48230","name":"LLC MONOLITH.NET","country":"UA","hits":83},{"asn":"15169","name":"Google LLC","country":"US","hits":63},{"asn":"36352","name":"HostPapa","country":"US","hits":18},{"asn":"174","name":"Code 200, UAB","country":"FR","hits":12},{"asn":"16509","name":"Anthropic, PBC","country":"US","hits":11},{"asn":"18779","name":"EGIHosting","country":"US","hits":10},{"asn":"46261","name":"BraveWay","country":"US","hits":10},{"asn":"51207","name":"Free Mobile","country":"FR","hits":7},{"asn":"210743","name":"Babbar SAS","country":"FR","hits":6},{"asn":"41281","name":"KeFF Networks Ltd","country":"SE","hits":5},{"asn":"9443","name":"Vocus Retail","country":"AU","hits":5},{"asn":"58087","name":"Datalix","country":"DE","hits":4},{"asn":"37054","name":"Telma Madagascar","country":"MG","hits":3},{"asn":"136907","name":"Huawei Cloud","country":"SG","hits":2},{"asn":"51167","name":"Contabo GmbH","country":"FR","hits":2},{"asn":"45102","name":"Alibaba.com LLC","country":"SG","hits":2}]}
+{"readable":true,"books":{"\/book\/esp":3,"\/book\/les-commandes-linux":2,"\/book\/linux-architecture-des-dossiers":1},"as":[{"asn":"","name":"LAN","country":"","hits":12857},{"asn":"8075","name":"Cloud","country":"US","hits":826},{"asn":"14618","name":"AWS EC2 (us-east-1)","country":"US","hits":446},{"asn":"24940","name":"Hetzner","country":"FI","hits":396},{"asn":"16276","name":"OVH","country":"FR","hits":150},{"asn":"32934","name":"Meta Platforms Ireland Limited","country":"US","hits":123},{"asn":"48230","name":"LLC MONOLITH.NET","country":"UA","hits":83},{"asn":"15169","name":"Google LLC","country":"US","hits":64},{"asn":"36352","name":"HostPapa","country":"US","hits":18},{"asn":"174","name":"Code 200, UAB","country":"FR","hits":12},{"asn":"16509","name":"Anthropic, PBC","country":"US","hits":11},{"asn":"18779","name":"EGIHosting","country":"US","hits":10},{"asn":"46261","name":"BraveWay","country":"US","hits":10},{"asn":"51207","name":"Free Mobile","country":"FR","hits":7},{"asn":"210743","name":"Babbar SAS","country":"FR","hits":6},{"asn":"41281","name":"KeFF Networks Ltd","country":"SE","hits":5},{"asn":"9443","name":"Vocus Retail","country":"AU","hits":5},{"asn":"58087","name":"Datalix","country":"DE","hits":4},{"asn":"37054","name":"Telma Madagascar","country":"MG","hits":3},{"asn":"136907","name":"Huawei Cloud","country":"SG","hits":2},{"asn":"51167","name":"Contabo GmbH","country":"FR","hits":2},{"asn":"45102","name":"Alibaba.com LLC","country":"SG","hits":2}]}
@@ -0,0 +1,4 @@
+{
+    "title": "Droits d'accès",
+    "_updated_at": "2026-05-16 12:01:38"
+}
@@ -0,0 +1,59 @@
+# Droits d'accès
+
+Cet article décrit comment partager un dossier `Images` entre les membres d'un groupe `famille` sous Linux, en combinant permissions Unix, bit SGID et ACL pour garantir que tout fichier ou sous-dossier créé reste accessible à l'ensemble du groupe.
+
+## Gestion des groupes
+
+Créer le groupe `famille` :
+
+```bash
+groupadd famille
+```
+
+Ajouter l'utilisateur `gerard` à ce groupe :
+
+```bash
+usermod -a -G famille gerard
+```
+
+Vérifier les groupes auxquels appartient `gerard` :
+
+```bash
+groups gerard
+```
+
+## Gestion des droits sur le dossier
+
+Restreindre l'accès au propriétaire et au groupe (`rwx` pour les deux, rien pour les autres) :
+
+```bash
+chmod 770 Images
+```
+
+Les permissions affichées sont alors `drwxrwx---`.
+
+Activer le bit SGID pour que tout fichier ou sous-dossier créé dans `Images` hérite automatiquement du groupe propriétaire (`famille`) au lieu du groupe primaire de l'utilisateur :
+
+```bash
+chmod g+s Images
+```
+
+Les permissions deviennent `drwxrws---`.
+
+Définir une ACL par défaut afin que le groupe `famille` dispose des droits `rwx` (lecture, écriture et traversée) sur tous les fichiers et sous-dossiers créés ultérieurement dans `Images` :
+
+```bash
+setfacl -m d:g:famille:rwx Images/
+```
+
+Pour appliquer aussi ces droits au contenu existant, on peut combiner ACL courante et par défaut, en mode récursif :
+
+```bash
+setfacl -R -m g:famille:rwx,d:g:famille:rwx Images/
+```
+
+Vérifier les ACL appliquées :
+
+```bash
+getfacl Images
+```