Solved mac_bsdextended : limiting user access to a portion of the file system

Hi everyone,

I'm trying to limit a user to access a portion of the file system using the mac_bsdextended module.

When I enter this rule the user has no access to all the file system but that's not what I'm trying to do :

ugidfw add subject uid myuser object filesys /usr/test mode n

I would like the user "myuser" to get access denied to /usr/test and its subdirectories but not the entire file system. What am I doing wrong ?

Thanks a lot !

Sebel
 
Oh sorry after reading many times the man page I realize I've made a big mistake : filesys represents here a whole file system not just a subdirectory. I have to manage the partitions to get it working ! Hope it will help someone in the future ! :)

Regards,

Sebel
 
Back
Top