Stowage/restic
2
0
Fork 0
mirror of https://github.com/restic/restic.git synced 2025-10-19 15:43:21 +00:00
Code Issues Projects Releases Packages Wiki Activity

docs: use absolute permissions for group accessible repositories

Browse source
This commit is contained in:
Michael Eischer 2025-09-06 19:15:03 +02:00
parent 06aa0f08cb
commit 537d107b6c
1 changed files with 9 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

17
doc/030_preparing_a_new_repo.rst
View file

@ -798,12 +798,13 @@ permission bit to all repository files with ``chmod``:
.. code-block:: console
$ chmod -R g+rX /srv/restic-repo
$ find /srv/restic-repo -type f -exec chmod 440 '{}' \;
$ find /srv/restic-repo -type d -exec chmod 750 '{}' \;
This serves two purposes: 1) it sets the read permission bit on the
repository config file triggering restic's logic to create new files as
group accessible and 2) it actually allows the group read access to the
files.
files and directories.
.. note:: By default files on Unix systems are created with a user's
primary group as defined by the gid (group id) field in
@ -818,15 +819,15 @@ access to these files. That's hardly what you'd want.
To make this work we can employ the help of the ``setgid`` permission bit
available on Linux and most other Unix systems. This permission bit makes
newly created directories inherit both the group owner (gid) and setgid bit
from the parent directory. Setting this bit requires root but since it
propagates down to any new directories we only have to do this privileged
setup once:
newly created directories or files inherit both the group owner (gid) and
setgid bit (only for directories) from the parent directory. Setting this
bit requires root but since it propagates down to any new directories we
only have to do this privileged setup once:
.. code-block:: console
$ chmod -R g+rX /srv/restic-repo
$ find /srv/restic-repo -type d -exec chmod g+sw '{}' \;
$ find /srv/restic-repo -type f -exec chmod 440 '{}' \;
$ find /srv/restic-repo -type d -exec chmod 2770 '{}' \;
This sets the ``setgid`` bit on all existing directories in the repository
and then grants read/write permissions for group access.