Is there a mask for ownership like umask?

[kdman]

umask is used to se a default permission for creating files.
Is there something like this to set the default ownership for any new file?

[wje_lf]

No .

[khafa]

suppose that there is a default ownership and it says every new file is defaulted to root.
if a user(who does not have root access ) creates a file and forgets to set the ownership to him/herself then that file is lost as he/she cant get it back without root access.

[Cabhan]

It's not a mask, but you can predict who the owner and controlling group will be, and can use umask to set the permissions of the controlling group.

The owner of a newly-created file is the creator, obviously, but the group is the primary group as specified in /etc/passwd. The fourth field for a user in /etc/passwd is the GID of his primary group. Knowing this, you could change the primary group to what you want, and use umask to give it the permissions you desire.

Hope this helps.

[dxqcanada]

Linux is based on Discretionary Access Control (DAC).

I think what you are looking for is Mandatory Access Control (MAC)

I believe that there are some security enhancing applications that can add MAC controls ... that may solve your problem.

[kdman]

suppose that there is a default ownership and it says every new file is defaulted to root.
if a user(who does not have root access ) creates a file and forgets to set the ownership to him/herself then that file is lost as he/she cant get it back without root access.

Actually I need the opposite.
I always login into root, but when I create/extract/manage My clients files, he can't access it or modify it until I change the ownership of all what I done.

Thanks for all, I'll continue using chown

[wje_lf]

I'm sure you already know this, but just in case you don't:

If you're doing things by hand (as opposed to a script which automates things), then chown's -R switch could be very useful.

[kdman]

I'm sure you already know this, but just in case you don't:

If you're doing things by hand (as opposed to a script which automates things), then chown's -R switch could be very useful.

Yes it is, but not on a folder have a thousands of files and sub folders

[bigtomrodney]

Yes it is, but not on a folder have a thousands of files and sub folders

Actually that's exactly what that command is for. The -R switch is for recursive which means it will act on all files and subfolders to those specified to the command.

[kdman]

Actually that's exactly what that command is for. The -R switch is for recursive which means it will act on all files and subfolders to those specified to the command.

Yes, but when you execute it on 500,000 file, you must wait about 15 minute with a very very high server load.
So I just execute it on the files that i created.