Hello
在OS X是否有更好的權限管理程式?
以前的OS有一個叫On Guard管理程式,它可以設定使用者只能讀寫某一個檔案夾,其他完全不給動或甚至看不到,這對學校是個不錯的管理方式
但是在OS X下雖然可以設定使用權限,但是使用者仍然可以存取到系統檔案夾內,同時有關OS 9的系統與軟體甚至可以被刪除,最令我傷腦筋的是浮動Dock的設定,一般使用者也可以刪除Dock裡的使用程式,雖然他們只是替身捷徑而已,但是這對管理者卻是一大麻煩...
有沒有更好的方法呢???
OS X是否有更好的權限管理程式??
版主: ross_tt、bryanchang、digdog、chester
OS X是否有更好的權限管理程式??
Have you tried changing the accessing bits of the /Applications folder to 755? Just do
chmod 755 /Applications
For some reason it is set to 775 by default...
chmod 755 /Applications
For some reason it is set to 775 by default...
OS X是否有更好的權限管理程式??
What do you mean about 755??
我在OS X下的Applications檔案夾是被鎖定的,所以並不怕被學生殺掉,但是OS 9的Applications(OS 9)就沒辦法被鎖定,我曾試過將有關OS 9的所有東西放到User裡的Admini裡,如果以學生的身份login就沒辦法被殺掉,可是我仍無法避免他們被複製到學生的硬碟裡...
目前對我來說最傷腦筋的是Dock裡的替身捷徑都無法鎖定,只要學生一拉出Dock範圍,軟體捷徑就被刪除了,實在很傷腦筋...
我在OS X下的Applications檔案夾是被鎖定的,所以並不怕被學生殺掉,但是OS 9的Applications(OS 9)就沒辦法被鎖定,我曾試過將有關OS 9的所有東西放到User裡的Admini裡,如果以學生的身份login就沒辦法被殺掉,可是我仍無法避免他們被複製到學生的硬碟裡...
目前對我來說最傷腦筋的是Dock裡的替身捷徑都無法鎖定,只要學生一拉出Dock範圍,軟體捷徑就被刪除了,實在很傷腦筋...
OS X是否有更好的權限管理程式??
<BLOCKQUOTE><font size="1" face="XYZ">code:</font><HR><pre>
[dhcpa4:~/Documents] scm% ls -l
:
drwxr-xr-x 11 scm staff 330 Apr 17 15:42 Papers
-rwxrwxrwx 1 scm staff 62012 Apr 3 14:27 bib
</pre><HR></BLOCKQUOTE>
Take the first line as an example. It says that Papers is owned by user "scm", belonging to the group "staff". In particular look at the first column "drwxr-xr-x":
<UL TYPE=SQUARE><LI>d: it is a folder,
<LI>rwx: the owner scm can read, write and view the contents of it (or execute it if it were a binary rather than a folder),
<LI>r-x: users in the group can read it, view the contents of the folder, but not write in it,
<LI>r-x: all other users can read it, view the contents of the folder , but not write in it.
</UL>The mode bits can be changed by the "chmod" command. A 7 means rwx, a 5 means r-x, and so on.. binary numbers. [img]images/smiles/icon_smile.gif[/img]
However, I was wrong in the last post. I think 775 is the correct setting for /Applications. It is owned by the group "admin" and newly created users do not belong
to that group.
<BLOCKQUOTE><font size="1" face="XYZ">quote
<BLOCKQUOTE><font size="1" face="XYZ">quote:</font><HR><STRONG>
目前對我來說最傷腦筋的是Dock裡的替身捷徑都無法鎖定,只要學生一拉出Dock範圍,軟體捷徑就被刪除了,實在很傷腦筋...</STRONG><HR></BLOCKQUOTE>
I think the doc preferences is stored in the file /Library/Preferences/com.apple.dock.plist. Probably you can change the owner of the file (chown), so the students can read it but not modify it?
Not sure it works through. Please tell us the result. [img]images/smiles/icon_smile.gif[/img]
[ 04-29-2002: 留言編輯者: Paladin ]
[dhcpa4:~/Documents] scm% ls -l
:
drwxr-xr-x 11 scm staff 330 Apr 17 15:42 Papers
-rwxrwxrwx 1 scm staff 62012 Apr 3 14:27 bib
</pre><HR></BLOCKQUOTE>
Take the first line as an example. It says that Papers is owned by user "scm", belonging to the group "staff". In particular look at the first column "drwxr-xr-x":
<UL TYPE=SQUARE><LI>d: it is a folder,
<LI>rwx: the owner scm can read, write and view the contents of it (or execute it if it were a binary rather than a folder),
<LI>r-x: users in the group can read it, view the contents of the folder, but not write in it,
<LI>r-x: all other users can read it, view the contents of the folder , but not write in it.
</UL>The mode bits can be changed by the "chmod" command. A 7 means rwx, a 5 means r-x, and so on.. binary numbers. [img]images/smiles/icon_smile.gif[/img]
However, I was wrong in the last post. I think 775 is the correct setting for /Applications. It is owned by the group "admin" and newly created users do not belong
to that group.
<BLOCKQUOTE><font size="1" face="XYZ">quote
I don't know whether you can change the mode bits of OS 9 files in the same way above. You can probably try it. Also, I think if a file can be read, it can be copied as well.<STRONG>我在OS X下的Applications檔案夾是被鎖定的,所以並不怕被學生殺掉,但是OS 9的Applications(OS 9)就沒辦法被鎖定,我曾試過將有關OS 9的所有東西放到User裡的Admini裡,如果以學生的身份login就沒辦法被殺掉,可是我仍無法避免他們被複製到學生的硬碟裡...</STRONG>
<BLOCKQUOTE><font size="1" face="XYZ">quote:</font><HR><STRONG>
目前對我來說最傷腦筋的是Dock裡的替身捷徑都無法鎖定,只要學生一拉出Dock範圍,軟體捷徑就被刪除了,實在很傷腦筋...</STRONG><HR></BLOCKQUOTE>
I think the doc preferences is stored in the file /Library/Preferences/com.apple.dock.plist. Probably you can change the owner of the file (chown), so the students can read it but not modify it?
Not sure it works through. Please tell us the result. [img]images/smiles/icon_smile.gif[/img]
[ 04-29-2002: 留言編輯者: Paladin ]