Choose effective or real group ID for the command selected in the Commands Permitted column. Usually, the effective group ID is sufficient for granting access to restricted system resources. However, sometimes the real group ID is required.
If you are unsure, try effective first. If the command does not perform as expected, then the real group ID is probably necessary.
For example, suppose you want to grant a role or user the right to create a directory with the mkdir
command and with bin
as the owning group. For mkdir
, the owning group is determined from the effective group ID. First, select mkdir
in the Commands Permitted column. Then, choose bin
for Group Ownership in this dialog box. Finally, select Effective and grant this right to the user.
Anyone granted the right to use the mkdir
command will create directories with an owning group of bin
.
Click Apply to apply the current settings. Click Reset to return to the settings that existed the last time you clicked Apply.