Chapter 10. File Access
directories
Since exports from Netware 6.5 don’t support hard links, they cannot be used as home directories in
Linux without special care. Both the X Window System, Gnome and KDE use hard links when locking
files. One workaround for this is to perform the following steps.
• Create a directory either on the local filesystem or, in the case of a ThinLinc cluster, on the machine
running the VSM server. Regardless of which, we will call it /localhome in this example. Make
/localhome sticky by executing chmod o+ws /localhome. This will enable all users to create files
and directories in /localhome, but no user will be able to erase another user’s files/directories.
• Each time the user logs in, check if the directory /localhome/<username> exists. If not, create it
using mkdir.
• Set the following environment variables for each user:
ICEAUTHORITY=/localhome/${USER}/.ICEAuthority
GCONF_LOCAL_LOCKS=1
Note: It is only necessarity to set GCONF_LOCAL_LOCKS for GConf 2.3.0 or older. In newer
versions, you must instead make sure that the variable GCONF_GLOBAL_LOCKS is not set to 1.
Another problem is that in Netware, most home directories are not owned by the user it is associated
with, but instead some superuser owns it (since the superuser created it). Try using FLAG.EXE from
Windows to correct this.
10.3. Restricting write access to users home directory
10.3.1. Introduction
When accessing directories from CIFS and NCP servers, these are mounted in subdirectories of the users
UNIX home directory. It is not possible to place the UNIX home directory on a CIFS or NCP server,
since these typically does not support the necessary POSIX file system semantics (such as hard links). In
a typical setup, applications such as Mozilla uses the UNIX home directory for settings (~/.mozilla),
while the user saves documents in ~/MyDocuments. In this case, it might be desirable to restrict access
to the UNIX home directory: Forbid saving arbitrary files to it. This can be solved by using a feature of
ThinLinc called homecreatefilter .
10.3.2. Activation
To activate homecreatefilter , create a symbolic link in the xstartup.d directory:
# ln -s /opt/thinlinc/libexec/tl-homecreatefilter.sh /opt/thinlinc/etc/xstartup.d/06-tl-homecreatefilter.sh
122
Comentarios a estos manuales