Remove sticky bit from GPFS log parent directory
Current set by run-mmpol.sh set the sticky bit on the root directory for the policy run output. While this accomplishes the intended goal of preventing the raw log file from being deleted even by a person in the atlab group, it also prevents someone from creating new directories in the log's root which impedes the rest of the analysis pipeline that isn't run with the root user.
This was partially caused by my misunderstanding about the function of the sticky bit and SGID bit. Instead, the following changes to the directory permissions should be made:
- The parent directory storing
raw/<log.gz>should have permissions2770set. This would giverwxpermissions to user and group and set the SGID bit to pass theatlabgroup to child directories and files. Ownership for now can stayroot:atlab - The
rawdirectory should have the sticky bit set to prevent log deletion except by the owner,root.1550will suffice. Permissions on the raw log file itself will remain440.