5.7.  ACLs with Sticky Bit

In this use case, multiple named users or named groups require full access to a general-purpose shared directory, such as "/tmp".  However, Write and Execute permissions on the directory also give users the ability to delete or rename any files in the directory, even files created by other users. Users must be restricted so they are only allowed to delete or rename files that they created.

This use case can be addressed by combining an ACL with the sticky bit. The sticky bit is existing functionality that currently works with Permission Bits. It will continue to work as expected in combination with ACLs.


loading table of contents...