Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I want to store mysql and postgres database dirs under my user folder, so is it possible to allow other users (_mysql and postgres) to access just directories they need (like ~/var/mysql and ~/var/postgres) using ACL without allowing them to see contents of other directories/files. If I add postgres allow list,search to ~ then postgres can read everything inside my user folder with read permission set for others. Or is it generally a bad idea and I'd better use folder outside my home folder to store such things?

share|improve this question
up vote 1 down vote accepted

is it generally a bad idea and I'd better use folder outside my home folder to store such things
you said it...just switch is and it
that's a yes....generally a bad idea, although i see it crop up on boards ALL the time. how do i let service X operate in this single subdirectory of my home?

share|improve this answer
I found that by default user folder has read permission for others (I assume that I changed this some time ago), so maybe it is ok especially if I am the only user of my mac, also I can block access to folders just disabling read access for others. – tig Nov 23 '10 at 23:44

From your tags, you are using OS X? Go to the Sharing preference pane of System Preferences and enable File Sharing. You can add any folder to the list to be shared, and select which users and groups have which permissions on it.

share|improve this answer
That enables network sharing, to let users on other computers mount the folder(s) remotely. Changing the folder permissions there does the same thing as changing them with the Finder's Get Info window. – Gordon Davisson Nov 22 '10 at 19:09
Oh right, I assumed that was what the poster wanted to do. Nevertheless, it shows that Apple endorses allowing other users read-only access to directories in the ~ folder means it's probably OK to do. – MJeffryes Nov 22 '10 at 19:56

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .