ACL stands for access control list. ACLs extend permissions on files beyond the traditional user-group-others triple.

learn more… | top users | synonyms (1)

0
votes
0answers
4 views

Darwin acl_get_file vs acl_get_link_np

On Darwin, there are two related functions - acl_get_file, and acl_get_link_np, which both query ACL information for a file. The difference is that, a) acl_get_link_np won't follow symlinks and, b) ...
0
votes
1answer
29 views

ACL contradict chmod

I have installed opencart 1.5.6.1 on Digital ocean ubuntu14.04 I have used "demo" as username and login by tightvnc opencart requird "www-data" as owner and group: $ sudo chown -R www-data:www-data ...
2
votes
1answer
17 views

How can I use ACL to give one user control over a directory and all its contents

Two users, Foo and Bar. Foo wants Bar to work on a project in Foo's home dir. [foo]$ mkdir project [foo]$ # Set defaults [foo]$ setfacl -m d:u::rwx,d:g::rwx,d:o::--- project [foo]$ # Set defaults ...
0
votes
0answers
19 views

How do I grant write access to an API?

I'm trying to run the SOFA Matlab/Octave API version 1.0.1. Copyright 2013 Acoustics Research Institute. This API implements SOFA version 1.0. I've emailed them and they said "I need to grant write ...
1
vote
2answers
43 views

What versions of Darwin's libacl have the acl_get_file bug?

In some versions of Darwin's libacl, there's a bug in the acl_get_file function in which in spuriously returns null and sets errno to ENOENT when passed paths to valid files. There are a decent number ...
5
votes
2answers
85 views

Allow owner to create & read files, but not modify or delete

I would like to give a user permissions to create and read files in a particular directory, but not to modify or delete files. If the user can append to files that is ok, but I'd rather not. This is ...
1
vote
1answer
55 views

directory permissions [closed]

I'm currently working on a PHP server explorer, and I have to determine if a directory is empty or not readable because of insufficient permission. My web application is running under the user ...
2
votes
1answer
45 views

Using ACL Permissions without allowing other groups to access a directory?

0. Add user bkupusr to group extbk leeand00@hostname:/home/leeand00/$ sudo groupadd extbk leeand00@hostname:/home/leeand00/$ sudo usermod -G extbk bkupusr 1. Created directory structure: ...
0
votes
0answers
32 views

OpenLDAP - ACL control - Full access to user

I need to create a ACL that give to user a full write to rootdn. I tried that: access to * by dn="cn=replicator,o=rootdomain" write But I get the some message. error 50 "Insufficient ...
2
votes
1answer
43 views

ACLs and classic permissions

I'm trying to set up a git server on my FreeNAS server. The problem I have is with setting up the permissions for different users/groups just as I want. Basically I have two different groups: ...
0
votes
2answers
168 views

Why do files created via Samba get different ACL (mask) permissions depending on the client OS?

I tested this on a clean install of Debian Jessie, but I also have this problem on other machines (ex: Ubuntu 12.04). In addition to the base install, I installed sudo, samba, and cifs-utils. Shared ...
1
vote
0answers
44 views

Is it possible to change file permissions when copying

I have a directory with default ACL permissions that get copied to all files created in that directory, but only if they are created in that directory. Would it be possible to change the permissions ...
2
votes
1answer
47 views

How can I use setfacl to give no access to “other” users?

The command setfacl -dm g::rwx mydir sets permissions for groups to read-write-execute. I'd like to run a similar command such that other users (i.e. not the owner) have no access whatsoever, but ...
1
vote
1answer
77 views

Set sticky bit by default for new directories via ACL?

I want to set up a directory where all new files and directories have a certain access mask and also the directories have the sticky bit set (the t one, which restricts deletion of files inside those ...
1
vote
1answer
117 views

AWS Outbound ACL Rules impact on incoming ssh connections

I am making a bastion ssh server on CentOS 7 in an AWS EC2 instance. When I use the following rules in its ACL, I am able to connect to the server just fine: Inbound Rules Allow traffic on port 22 ...
0
votes
1answer
27 views

Execution bit not being set [duplicate]

I have just set up an EC2 instance to play around with and am testing file permissions; however, I notice that the execution bit is not being passed down to the lower level (read and write are, just ...
1
vote
0answers
15 views

ACL doesn't always get inherited

Solaris platform. why is it that "sometimes" a file copied into a directory that has a default ACL attribute does not inherit that ACL? Other times it does.
0
votes
0answers
76 views

Permission of any file folder set to read only on upload

I have inherited an old CMS system that I have just cleansed from a massive hack attack. I copied all the files and databases, scrapped the old server, cleansed the files via various means, cleansed ...
2
votes
1answer
20 views

Can I use permissions or facls to limit the creation of files in a directory without limiting the creation of directories?

I have some directories with quite permissive permissions, which get cluttered up with files (scripts) created by lots of different users. I try to encourage people to create their own sub-directory ...
0
votes
0answers
151 views

Dovecot ACL config for read-only user mail folders (CentOS 6)

I'm using Dovecot as an IMAP server. It's the latest version from source installed to /opt. Dovecot -n output: # 2.2.16: /opt/dovecot/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-504.12.2.el6.x86_64 ...
1
vote
1answer
60 views

Who can change ACL permissions?

I'm using ACL to control access to individual roots of webs for different instances of Apache and different groups of admins. I've got a Unix group admins-web22 for admins of a particular website and ...
0
votes
0answers
97 views

postfix some users can send mail to the (distribution lists) and other users not

How can I do the following things: Some users can send mail to the mailing list (distribution lists) and other users not. For example: the everyone@mycomp.com will be able to send e-mails only for ...
0
votes
1answer
47 views

File/dir permission conundrum

I support a dev server for WordPress sites. Server is using the Nginx/php-fpm stack. I'm struggling with setting up file and directory permissions so that www-data has read and write access while our ...
1
vote
0answers
40 views

OS X: Apply inheritable ACL permissions to pre-existing subfolders and files

I have a folder with numerous ACL permissions set. Most of these include file_inherit and directory_inherit permissions and therefore should be, and are, automatically propagated to any new ...
1
vote
0answers
21 views

Is there a way to backup and restore ACL file and folder permissions on linux the way that there is using icacls in Windows? [duplicate]

In Windows you can do this (backup and restore ACL permissions) can you do this in Linux? And to clarify, I mean ACLs in Linux, I do not mean the default permissions modified with chmod / chown.
3
votes
2answers
193 views

Back up and restore file permissions

Is there a way to back up and restore file ownership and permissions (the things that can be changed with chown and chmod)? You can do this in Windows using icacls. What about access control lists?
1
vote
0answers
11 views

How can I cause cvs update to use the destination folder's default posix acl mask?

I have a directory and file with these permissions: # file: blue/ # owner: user-a # group: group-a user::rwx user:user-b:rwx group::rwx mask::rwx other::r-x default:user::rwx default:user:user-b:rwx ...
1
vote
1answer
117 views

can’t set ACLs on FreeBSD UFS

$ sysctl -a | grep acl kern.features.ufs_acl: 1 vfs.acl_nfs4_old_semantics: 0 $ mount /dev/ada0p2 on / (ufs, local, journaled soft-updates) devfs on /dev (devfs, local, multilabel) devfs on ...
0
votes
2answers
175 views

Solaris 11.2 extended permissions shown by ls

I have a file that shows up as having extended file permissions. ls -V /usr/share/X11/app-defaults/XScreenSaver rwx------ 1 root root 53 Dec 2 21:52 ...
3
votes
1answer
227 views

Can ACLs override file perms on Linux?

I struggled with this problem on FreeBSD recently, but thank God for ZFS which solved it for me there. However I have it again in CentOS with ext4 and don't know if there is an easy way around it (or ...
1
vote
0answers
16 views

Problem using Access control lists for new users, ex ( afolder created in skel directoy have acl set, it should apply to new users)

I have a doubt regarding ACL I want to give permissions to a group using ACL A directory created in SKEL directory needs to have a default ACL set that allows the members of the group “linux” to ...
1
vote
1answer
54 views

What is the difference between these two sets of command for configuring ACL permissions?

Hi I am wondering what is the difference between the two sets of commands below: 1) To allow Davis to access and modify all files and folders in the the home directory of John # setfacl -m ...
2
votes
1answer
318 views

Set group ownership on FTP upload via an ACL

I am interested in setting an ACL which will chown all the files I upload through FTP to the www-data group. However, after performing chown -R user:www-data /var/www/website.com/public_html/ ...
1
vote
0answers
42 views

Why doesn't the owning group get the executable bit? [duplicate]

Playing with ACL's: [root@rex web]# pwd /media/web [root@rex web]# ll -d drwxr-xr-x. 2 root root 4096 Jan 1 14:31 . [root@rex web]# setfacl -m d:g::rwx . [root@rex web]# setfacl -m g::rwx . ...
1
vote
2answers
135 views

How do I know ACLs are supported on my file system?

Is it enough to see getfacl giving no error, or do I have to check some other place to see whether or not ACLs are supported by the file systems?
4
votes
2answers
215 views

Unix/Linux equivalent of Windows' Bypass Traverse Checking

Windows has a privilege called "Bypass Traverse Checking" (also known as SeChangeNotifyPrivilege). It allows the system to bypass ACL checks in parent objects so a user can [potentially] access a ...
2
votes
0answers
41 views

Cross-NFS file move adds ACL

Moving a file from one NFS4 mount to another adds an ACL. The reason, if I understand the process correctly, is that mv queries the system.nfs4_acl extended attribute of the source file, and uses the ...
3
votes
0answers
156 views

Does Samba 4 actually respect Unix file acls?

After researching the subject on the internet I drew a conclusion that Samba should take into account Unix file acls. During my tests I found the opposite. Only Unix file mode bits are respected, and ...
3
votes
1answer
371 views

How to find files/directories with specific ACL

How to I do something like find . -acl u:jim:rx find . -acl u:*:r find . -noacl u:jim:r etc. I know that the find command does not support this but, you have the idea. Are there any scripts, even ...
1
vote
1answer
106 views

ZFS ACL (NFS4 ACL)

I'm using Openindiana (Solaris 10) containers and I want to let users upload web content over sftp I'v managed to setup internal-sftp of openssh and lock user under web root. All the files under web ...
1
vote
1answer
85 views

User cannot access a file after setting an ACL [duplicate]

I cannot enter a directory after creation in a folder with an ACL: I am attempting to limit rwx access to a folder for just a single group and no one else. I would like to be able to add new users to ...
2
votes
2answers
65 views

facl ignoring the “x” permission but only on files

When I use setfacl to manage on what permissions should the children files / directories have, for some reason the files have all the permissions except the execute ("x") one. ...
1
vote
0answers
56 views

Copying files to a directory shared via ACL doesn't get default mask

I'm trying to setup a simple shared directory on an ext4 filesystem for a group of users to work on. Let's say i just need to give all permissions to all users belonging to the group "workgroup" to ...
2
votes
0answers
110 views

How do I recursively apply default ACLs of a directory to its descendants?

If I have a directory with default ACL entries assigned to it, but some or all of its descendant files and sub-directories have access or default ACLs that do not agree with those defaults, how do I ...
1
vote
1answer
320 views

How does ACL calculate the effective permissions on a file?

I ran the following command to give the wheel group rwx permissions on new files and subdirectories created: [belmin@server1]$ ls -la total 24 drwxr-sr-x+ 2 guards guards 4096 Aug 27 15:30 . ...
4
votes
1answer
669 views

What relationships do tie ACL mask and standard group permission on a file?

At first I create a file and check it's standard permissions and ACL entries: $ touch file; ls -l file; getfacl file -rw-r--r-- 1 user user 0 Jul 30 16:26 file # file: file # owner: user # group: ...
1
vote
1answer
113 views

Give a user the permission to access files in a directory

I have mounted a volume from NAS storage to my Solaris 10 machine using NFS. I want to give read/write permission for a user to the directories and subdirectories and files. I have tried setfacl -m ...
0
votes
2answers
213 views

need give read write access to a folder and its subfolders and directories for a particular user

Could you help me to provide read/write access to a folder, its sub-folders and all the files below for a particular user? I tried to use the getfacl command, but didn't find a solution. I'm using ...
1
vote
0answers
917 views

Samba 4.1.9 returning “access denied” trying to change share perms from Win client

UPDATE: version mismatch seemed to stop happening for some reason, although not sure why/at what point. Have a "public" (within LAN...like this) read-write share on a CentOS 6.4 box running, ...
0
votes
1answer
271 views

How can I tell why I have permissions to read a file? [closed]

Here's what I just noticed on my CentOS SSH account: stat output $ stat /dev/kvm File: `/dev/kvm' Size: 0 Blocks: 0 IO Block: 4096 character special file Device: ...