Java™ Application Development on Linux - Dator

448Chapter 20Open Source Web <strong>Application</strong> ServersNOTEThere are two strategies that Linux distributions follow for assigning a defaultgroup to a new user. One is to put all users into a group called staff or somesuch. This is widely considered a security risk since it often leads to making filesaccidentally readable or writable by all users on the system. The more commonmethod is to create a group for each user when the user is created.TIPIf you get in the habit of creating groups, you might want to assign the numberssystematically: 500–599 groups for programs, 600–699 groups for program installation,700–799 groups for company departments to allow them to controltheir own Web content, and so on.2. Change group ownership of /usr/local.Odds are, /usr/local already exists on your system. It may evenhave several programs installed in it. You must give the group ownershipover everything in /usr/local and below. The chgrp command changesthe group owner of files, and the -R argument says to do so recursively:# cd /usr/local# chgrp -R local .At this point, everything in /usr/local and below is group-ownedby the local group.3. Set group permissions on /usr/local.Basically, you want the group to be able to read and write everythingin /usr/local. To do this, you need to change the permissions on all thefiles with the chmod. As with chgrp, this command takes a -R argumentthat recursively walks the directory tree. We need to give everyone in thegroup read and write permission on all the files:# chmod -R g+rw .