UNIX Permissions for DCE Subdirectories

All directories in the file system are created with UNIX permission set to rwxr-xr-x for user root and group bin. In subsequent configurations, the DCE Security Service can define roles for several administrators (principals or groups). A possible scenario follows:

· A software administrator who owns the installed software packages and has write and modify permissions for the entire set of files included in dcelocal.

· DCE service administrators who are responsible for a particular DCE service such as Security and have read and write permissions for the data files for the respective service. You can assign a separate DCE Security Service administrator, while a single cell administrator can have responsibility for the remaining DCE services.

· A local DCE system administrator who is responsible for client setups and has read and write permissions for the respective local files.