Remove sticky bit from GPFS log parent directory
Current set by run-mmpol.sh
set the sticky bit on the root directory for the policy run output. While this accomplishes the intended goal of preventing the raw log file from being deleted even by a person in the atlab
group, it also prevents someone from creating new directories in the log's root which impedes the rest of the analysis pipeline that isn't run with the root
user.
This was partially caused by my misunderstanding about the function of the sticky bit and SGID bit. Instead, the following changes to the directory permissions should be made:
- The parent directory storing
raw/<log.gz>
should have permissions2770
set. This would giverwx
permissions to user and group and set the SGID bit to pass theatlab
group to child directories and files. Ownership for now can stayroot:atlab
- The
raw
directory should have the sticky bit set to prevent log deletion except by the owner,root
.1550
will suffice. Permissions on the raw log file itself will remain440
.