It had always been a common chore for me to hop in a update file permissions on a directory when a project changed hands or for any number of other reasons.<\/p>\n
But this week, I was tasked with removing an entire user from the server. I know that Linux will handle the file ownership situation somewhat gracefully if I simply remove the user. Though, that just doesn’t seem very clean in my opinion.<\/p>\n
I much preferred to reassign the permissions for that user to another user, then remove their account.<\/p>\n
I started by having a look at the man pages for chown<\/strong>. Pretty straightforward if you make use of the –from<\/em> flag.<\/p>\n Easy as pie right. So, let’s do the group. On most Linux servers that I’ve helped administer, if one user manages a directory solo, we also assign the directory to the primary group that is created for a user.<\/p>\n Here we go! Crap, there’s no –from<\/em> available on the chgrp<\/strong> command. Now what?<\/p>\n Though I can’t imagine it, I’m sure there’s a pretty good reason for not providing a –from<\/em> flag. It just seems to common an operation to overlook.<\/p>\n Luckily, we can leverage Linux’s built-in find command to loop over files conditionally based on their group id.<\/p>\n Group id, what’s that? If you’re familiar with relational databases, you’re no doubt aware of how most records in a database have a numeric primary key to reference them. So, a users table might, for example contain three fields:<\/p>\n id, username, firstname, lastname<\/em><\/p>\n In the case of Linux, the same thing kinda happens under the hood. Except, only the id and username are stored.<\/p>\n To find the user id of a user or group id of a group, simple view the contents of the \/etc\/passwd or \/etc\/group files. You’ll likely need to have root privileges to do this.<\/p>\n We’re only concerned with the group id here, since the chown<\/strong> command made our lives easy. Once you know the group id, we’ll use the find command to loop over all files that are identified as being owned the specific group id you provide.<\/p>\n That’s it!<\/p>\n As a final note, if you are removing a user completely, don’t forget to remove them from any groups in the \/etc\/group file, and also to remove their user account from the server.<\/p>\n","protected":false},"excerpt":{"rendered":" Changing file and group ownership from one user or group to another is a common requirement in the server admin world, here are two quick tips on how to go about it.<\/p>\n","protected":false},"author":1,"featured_media":2271,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"amp_status":""},"categories":[41],"tags":[261,141],"_links":{"self":[{"href":"https:\/\/www.sitekickr.com\/blog\/wp-json\/wp\/v2\/posts\/2269"}],"collection":[{"href":"https:\/\/www.sitekickr.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.sitekickr.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.sitekickr.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.sitekickr.com\/blog\/wp-json\/wp\/v2\/comments?post=2269"}],"version-history":[{"count":4,"href":"https:\/\/www.sitekickr.com\/blog\/wp-json\/wp\/v2\/posts\/2269\/revisions"}],"predecessor-version":[{"id":2274,"href":"https:\/\/www.sitekickr.com\/blog\/wp-json\/wp\/v2\/posts\/2269\/revisions\/2274"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.sitekickr.com\/blog\/wp-json\/wp\/v2\/media\/2271"}],"wp:attachment":[{"href":"https:\/\/www.sitekickr.com\/blog\/wp-json\/wp\/v2\/media?parent=2269"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.sitekickr.com\/blog\/wp-json\/wp\/v2\/categories?post=2269"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.sitekickr.com\/blog\/wp-json\/wp\/v2\/tags?post=2269"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}chown --from=oldguy newguy * -R<\/pre>\n
Reassigning the Group<\/h3>\n
cat \/etc\/passwd\r\ncat \/etc\/group<\/pre>\n
find . -gid 512 -exec chgrp newgroup {} +<\/pre>\n