-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Mon, Jan 04, 2016 at 03:25:02PM -0500, Gary Dale wrote: > On 04/01/16 12:14 PM, to...@tuxteam.de wrote:
[...] > >Dunno about systemctl, but FWIW you can't change the permissions of > >a symlink. It's always "all on". > > > > > Interesting. Why do they behave that way? Hard links don't (but > replacing the symlink with a hardlink would fail if /bin & /sbin > were on different devices. Also, I gather that systemctl looks at > how it is called to determine the action it needs to take - would > that create a problem if called from a hard link instead of a > symlink?). Perhaps I was a bit cavalier with my "all on": applications *doing* something useful with a symlink reference it (except things like "rm", of course). Thus, the permissions of the referenced-to file apply. Otherwise -- imagine: I do an ln -s /bin/bash $HOME, chmod u+w $HOME/bas (since I own the link) and now have write access to the system shell?! Hard links are a completely different kind of animal: they are alternative directory entries for the same blob of data. Consequently, there is no "primary" (as there is in symlinks). There are no dangling hardlinks (unless your file system is corrupted). As you can well imagine, some restrictions apply in the creation of hardlinks: tomas@rasputin:~$ sudo useradd -m test [sudo] password for tomas: tomas@rasputin:~$ ls -al /home/test total 20 drwxr-xr-x 2 test test 4096 Jan 4 21:50 . drwxr-xr-x 9 root root 4096 Jan 4 21:50 .. -rw-r--r-- 1 test test 220 Apr 10 2010 .bash_logout -rw-r--r-- 1 test test 3392 Jul 13 2012 .bashrc -rw-r--r-- 1 test test 675 Apr 10 2010 .profile tomas@rasputin:~$ ln /home/test/.profile test-profile ln: failed to create hard link `test-profile' => `/home/test/.profile': Operation not permitted Regards - -- tomás -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iEYEARECAAYFAlaK2GoACgkQBcgs9XrR2kZg+QCfQoqu5lph/Nh7ZyDOFv0jwG7y aDkAn29+qk8cLS3je2DKwMUk3lvt2o3F =8Nmr -----END PGP SIGNATURE-----