ACL stands for access control list. ACLs extend permissions on files beyond the traditional user-group-others triple.

learn more… | top users | synonyms (1)

5
votes
1answer
173 views

Equivalent of subinacl.exe on linux / unix?

When modifying permissions on Windows I backup the ACLs to a file first using a commands like: subinacl /noverbose /output=C:\temp\foldername_redir_permissions_backup_star_star.txt /subdirectories "...
2
votes
2answers
42 views

Properly set execute bit based on file type?

I'm trying to cleanup permissions on an Apache web server. I'm finding lots of files with the execute bit that don't customarily have it (or should not have it): $ sudo find /var/www/html -executable ...
0
votes
0answers
48 views

How to Include the Common ACL Rules in a Group ACL in the pfSense Squid Guard Package?

I figured out how to use the GUI to block black listed sites dependent on what time it is, but it's a little verbose for my tastes...is it possible to set a Common ACL and then have the Target ...
1
vote
1answer
57 views

In pfSense what is the meaning of the “Target Categories” and “Target Categories for off-time” columns in the Groups ACL Screen?

In SquidGuard within pfSense 2.3.1 in the Groups ACL screen there are two columns in the Target Rules List Target Categories and Target Categories for off-time. Each value in the row has the values ...
2
votes
1answer
25 views

Problem overriding ACL for default group ownership

I am unable to override previously set ACL settings. This is what it looks like: root@ip-xxx-xxx:/srv/www# getfacl grace.staging.site.com.au/ # file: grace.staging.site.com.au/ # owner: web # group: ...
0
votes
1answer
34 views

Cannot override default group permissions with ACL

I've set this ACL on a directory: root@<server_ip>:/srv/www# getfacl example.com/ # file: example.com/ # owner: web # group: www-data user::rwx group::r-x other::r-x default:user::rwx default:...
1
vote
1answer
27 views

Folder Permissions Issue

I am currently having a strange issue and it doesn't really match anything I have found here so I am hoping someone can shed some light on my issue for me. I am currently running an Ubuntu 14 linux ...
2
votes
1answer
34 views

ACL and plain old permissions

I have read a bunch of articles, but still cannot get an idea of ACL, so I have following questions. What are benefits of using ACL over old permissions (0777 for example) and changing file owner,...
3
votes
2answers
68 views

setgid sticky bit not working

I have yet another frustrating problem. I have a group of users belonging to the "testing" group. I have a folder located at /var/log/projects with the setgid bit set. This is so any new files or ...
0
votes
0answers
44 views

scp file to remote server prevent delete

A team want to implement a crude file dump backup solution to be used by multiple hosts. They have a remote user on the backup server backupusr that they can SSH/SCP with, with SSH keys setup. The ...
2
votes
1answer
43 views

Can directories and file inherit same permissions as parent directory?

I want all directories and files to inherit same permissions as parent directory.
1
vote
1answer
20 views

Permissions to allow files to be written, but not read, overwritten or modified

I'm setting up a file share for a small group (CIFS/samba on FreeNAS, so the base system is FreeBSD/ZFS using ACLs). I want to allow users to put stuff into a folder on the share - but not to be ...
5
votes
0answers
56 views

group member unable to write to a group-writable file with reiserfs and extended ACLs

Users vi and rust share group rust and want to use some file in shared manner. rust$ ls -l myfile -rw-rw-r-- 1 vi rust 0 May 30 03:48 myfile rust$ stat myfile | grep Gid Access: (0664/-rw-rw-r--) ...
1
vote
1answer
46 views

rsync fails/hangs when copying from a Linux ext4 to a FreeBSD ZFS (via SSH)

When I try to copy directories from an ext4 on Linux to a ZFS on FreeBSD (via SSH), rsync immediately fails without copying anything: # rsync -haxHAX /mnt/source/ root@lethe:/mnt/dest/ -vvv opening ...
4
votes
0answers
36 views

Git with multiple users on other systems using setfacl?

I'm setting up a git environment where multiple developers will work with per project. We have 1 server running git, and 2 seperate servers, 1 live and 1 dev. on dev I created a group and added the ...
-1
votes
1answer
37 views

Extended permissions - after set acl, group cannot write [closed]

I want to use setfacl to set permissions to dir for the users group. I do something like this: mkdir /Employee chgrp employeers /Employee setfacl -m d:g::rwx /Employee And now, when I try to create ...
4
votes
2answers
60 views

Is it possible to create a “negative” ACL?

Is it possible to create an ACL to deny access to a specific user (say jdoe) to a specific file? I'm not interested in the trivial solution of an ACL that gives access to the file to all users except ...
1
vote
0answers
50 views

setfacl fails on files created by Apache

I have a directory owned by my user vagrant. The webserver (and web application) run as www-data. Both users need to create and modify directories and files in this directory, regardless of who ...
3
votes
1answer
56 views

ACL not working on directories

For some reason when I create new file from Windows I can change the permissions just fine but when I create a folder it won't let me change the permissions, I get this error: A device attached to ...
1
vote
3answers
88 views

Predefined group ids across Linux distros?

In order to successfully implement w/r access via ACL for external storage with ext4 fs I need to assign default group id for files on storage. LSB_5.0.0 say: This specification makes no attempt to ...
0
votes
0answers
57 views

SOLVED - OpenVZ acl support for Samba

Setting up Samba-4.3.5 as AD domain fileserver in OpenVZ container, running in ProxMox (pve-manager/3.4-6/102d4547 running kernel: 2.6.32-39-pve). Hardware node has enabled acl support for /var/lib/vz....
1
vote
1answer
57 views

How to give write / create right to not yet existing files w/o write access of the parent directory?

I don't know if this is even possible so I need to ask. I'd like to allow a single file to be created by a user (a flag-file) but only that file should be able to be created. As I have the parent ...
1
vote
0answers
21 views

Inheriting permissions with ACLS

I've trying to set up a CVS repository using ACL's (setfacl) and having trouble getting permissions to inherit properly. Namely, when a user commits to the repository, I want the file to inherit the ...
0
votes
0answers
49 views

Samba4 AD privilege problem

I mounted NFS share to debian. Below following fstab record: //192.168.14.24/estimating /srv/samba/WDEstimating cifs credentials=/root/.oakservercredentials,iocharset=utf8,file_mode=0777,dir_mode=...
1
vote
0answers
11 views

Example of situation where ACL unaware tools would grant unintended permssions

This document about File ACLs makes mention that the masking mechanism was put in place to solve the problem of ... POSIX.1 applications that are unaware of ACLs will not suddenly and ...
1
vote
0answers
60 views

make ACL to work perfectly

I know there are plenty of questions and answers about ACL and permissions, but to be honest they are so weak to make any coherent understanding! it's just like a mix of unorganized information. Hope ...
2
votes
0answers
60 views

Permissions (ACL) to allow creation of new files only - are extended attributes also needed?

I want to use a directory as a sort of drop-off point, similar to the Public folder in each Mac OS X home directory, that is: certain users (or everyone) should be able to create new files inside this ...
0
votes
1answer
82 views

Access from multiple users to same directory but can't change directory group to a common one

I need to give full access to user1 and user2 to this directory: drwxr-xr-- 3 oracle dba 4096 feb 9 23:16 scripts I can't change directoy group because probably that group is needed for other ...
2
votes
0answers
26 views

How do I specify a relative change to ACL of current user/group?

I have a directory that already might have some subdirectory configured rwx for www-data, but I want to make a final pass and ensure www-data has a full read access on the full directory. All these ...
1
vote
1answer
103 views

Does “defaults” option include “acl” option in /etc/fstab?

I'm working with ACLs on CentOS 7 and noticed that the partition (/) where ACLs are applied is mounted with defaults options. As far as I know ACLs need that the acl option is enabled in the mount, ...
2
votes
2answers
47 views

how to restrict a user to access the file

I have created a file which resides inside my directory on a unix server. People have sudo privileges. How can I restrict them to read that file (even when they have sudo previleges) ?
1
vote
2answers
97 views

How to Backup and Compare File Permissions?

Is there a way you can setup a list of receipts of folders and directories of their correct default permissions that can be used as a backup to compare the correct permissions and be used to fix ...
3
votes
1answer
135 views

Are there more advanced filesystem ACLs beyond traditional 'rwx' and POSIX ACL?

Are there any simple and integrated (i.e. embedded into filesystem) ACL patches for Linux kernel exist at all? The problem is simple: I need something more flexible and advanced beyond classic 'rwx' ...
1
vote
0answers
63 views

When using linux acl mkdir and mkdir -p do different things

I have a directory bar: # file: bar/ # owner: root # group: root user::rwx user:little-jonny:rwx group::r-x mask::rwx other::r-x default:user::rwx default:user:little-jonny:rwx default:group::r-x ...
-1
votes
1answer
73 views

Allowed group can't access a folder [closed]

I've a weird problem on my linux machine, I've multiple users, we can say u1, u2, u3... who all belong to a group G. I have a group folder in /home who belong to one of these user (we'll say u1), and ...
2
votes
1answer
57 views

ACL group permission still not allowing write permissions

There's a file called '/etc/file.conf' on my filesystem. $ getfacl /etc/file.conf getfacl: Removing leading '/' from absolute path names # file: etc/file.conf # owner: root # group: root user::rw- ...
0
votes
1answer
44 views

apache httpd ACLs not working

What is the issue with the rule below <Directory /data/share/web/marketing/jacaranda> #AllowOverride All <Files "wp-login.php"> Order Deny,Allow Deny from all ...
5
votes
1answer
144 views

Why does default setfacl fail for nested directories?

I am using sftp with the internal-sftp for debian. What I'm trying to acomplish is to jail all users to a specific folder which is working fine. I also need to have a single user that has "admin" ...
3
votes
2answers
260 views

SFTP clients uploading files with too restrictive rights

I have the following setup: Ubuntu 14.4 server offering SFTP service in a front-end area. External clients have the ability to upload files. A back-end process (on another server) tracks uploaded ...
1
vote
0answers
88 views

How to set ACL on a USB-device

I'm new to acl's so this is blackmagic to me. But what I have is a camera that I want to talk to. So I got a netbooted debian machine: ulf@term13:~(0)$ lsb_release -a No LSB modules are available. ...
2
votes
0answers
73 views

What is the effect of ACLs/umask on the permissions of the executable file generated by gcc?

I have been wondering how gcc determines the resulting file permissions of the executable file being generated. To gain some insight, I considered a minimalistic program test.c #include <fcntl.h&...
1
vote
1answer
54 views

How are permissions in linux implemented?

It is in my knowledge that Linux implements a DAC-based model for file access control, however I recently came across the fact that ACL's have to manually be enabled in Linux. My question is: How ...
0
votes
0answers
13 views

Darwin acl_get_file vs acl_get_link_np

On Darwin, there are two related functions - acl_get_file, and acl_get_link_np, which both query ACL information for a file. The difference is that, a) acl_get_link_np won't follow symlinks and, b) ...
0
votes
1answer
408 views

ACL contradict chmod

I have installed opencart 1.5.6.1 on Digital ocean ubuntu14.04 I have used "demo" as username and login by tightvnc opencart requird "www-data" as owner and group: $ sudo chown -R www-data:www-data /...
2
votes
1answer
74 views

How can I use ACL to give one user control over a directory and all its contents

Two users, Foo and Bar. Foo wants Bar to work on a project in Foo's home dir. [foo]$ mkdir project [foo]$ # Set defaults [foo]$ setfacl -m d:u::rwx,d:g::rwx,d:o::--- project [foo]$ # Set defaults ...
0
votes
0answers
21 views

How do I grant write access to an API?

I'm trying to run the SOFA Matlab/Octave API version 1.0.1. Copyright 2013 Acoustics Research Institute. This API implements SOFA version 1.0. I've emailed them and they said "I need to grant write ...
1
vote
2answers
51 views

What versions of Darwin's libacl have the acl_get_file bug?

In some versions of Darwin's libacl, there's a bug in the acl_get_file function in which in spuriously returns null and sets errno to ENOENT when passed paths to valid files. There are a decent number ...
6
votes
2answers
1k views

Allow owner to create & read files, but not modify or delete

I would like to give a user permissions to create and read files in a particular directory, but not to modify or delete files. If the user can append to files that is ok, but I'd rather not. This is ...
1
vote
1answer
67 views

directory permissions [closed]

I'm currently working on a PHP server explorer, and I have to determine if a directory is empty or not readable because of insufficient permission. My web application is running under the user apache,...
2
votes
1answer
190 views

Using ACL Permissions without allowing other groups to access a directory?

0. Add user bkupusr to group extbk leeand00@hostname:/home/leeand00/$ sudo groupadd extbk leeand00@hostname:/home/leeand00/$ sudo usermod -G extbk bkupusr 1. Created directory structure: leeand00@...