ACL stands for access control list. ACLs extend permissions on files beyond the traditional user-group-others triple.

learn more… | top users | synonyms (1)

2
votes
1answer
28 views

How to find files/directories with specific ACL

How to I do something like find . -acl u:jim:rx find . -acl u:*:r find . -noacl u:jim:r etc. I know that the find command does not support this but, you have the idea. Are there any scripts, even ...
1
vote
0answers
15 views

ZFS ACL (NFS4 ACL)

I'm using Openindiana (Solaris 10) containers and I want to let users upload web content over sftp I'v managed to setup internal-sftp of openssh and lock user under web root. All the files under web ...
1
vote
1answer
20 views

User cannot access a file after setting an ACL [duplicate]

I cannot enter a directory after creation in a folder with an ACL: I am attempting to limit rwx access to a folder for just a single group and no one else. I would like to be able to add new users to ...
1
vote
2answers
18 views

facl ignoring the “x” permission but only on files

When I use setfacl to manage on what permissions should the children files / directories have, for some reason the files have all the permissions except the execute ("x") one. ...
1
vote
0answers
34 views

Copying files to a directory shared via ACL doesn't get default mask

I'm trying to setup a simple shared directory on an ext4 filesystem for a group of users to work on. Let's say i just need to give all permissions to all users belonging to the group "workgroup" to ...
1
vote
0answers
35 views

How do I recursively apply default ACLs of a directory to its descendants?

If I have a directory with default ACL entries assigned to it, but some or all of its descendant files and sub-directories have access or default ACLs that do not agree with those defaults, how do I ...
1
vote
1answer
57 views

How does ACL calculate the effective permissions on a file?

I ran the following command to give the wheel group rwx permissions on new files and subdirectories created: [belmin@server1]$ ls -la total 24 drwxr-sr-x+ 2 guards guards 4096 Aug 27 15:30 . ...
2
votes
1answer
117 views

What relationships do tie ACL mask and standard group permission on a file?

At first I create a file and check it's standard permissions and ACL entries: $ touch file; ls -l file; getfacl file -rw-r--r-- 1 user user 0 Jul 30 16:26 file # file: file # owner: user # group: ...
0
votes
1answer
57 views

Give a user the permission to access files in a directory

I have mounted a volume from NAS storage to my Solaris 10 machine using NFS. I want to give read/write permission for a user to the directories and subdirectories and files. I have tried setfacl -m ...
0
votes
2answers
159 views

need give read write access to a folder and its subfolders and directories for a particular user

Could you help me to provide read/write access to a folder, its sub-folders and all the files below for a particular user? I tried to use the getfacl command, but didn't find a solution. I'm using ...
1
vote
0answers
644 views

Samba 4.1.9 returning “access denied” trying to change share perms from Win client

UPDATE: version mismatch seemed to stop happening for some reason, although not sure why/at what point. Have a "public" (within LAN...like this) read-write share on a CentOS 6.4 box running, ...
1
vote
1answer
122 views

How can I tell why I have permissions to read a file? [closed]

Here's what I just noticed on my CentOS SSH account: stat output $ stat /dev/kvm File: `/dev/kvm' Size: 0 Blocks: 0 IO Block: 4096 character special file Device: ...
0
votes
1answer
84 views

setfacl remove all write access

I want to remove all write access to files & directories for any user or group while preserving other permissions. Is this possible?
3
votes
1answer
1k views

ACL is NOT enabled but it's working [duplicate]

How this is possible? ACL is not enabled in /etc/fstab, and I can verify it via manually opening fstab or running sudo mount | grep -i acl. But getfacl & setfacl Commands would work without any ...
2
votes
1answer
52 views

OSX/Darwin ACL Format

In OS X, if you want to view the ACL information on a file, you can do so with the -e option of `ls. $ ls -lde app/cache drwxrwxr-x+ 7 alanstorm staff 238 Apr 1 10:02 app/cache 0: user:alanstorm ...
4
votes
2answers
166 views

Precedence of user and group owner in file permissions

I just ran into something unexpected (for me) regarding file permissions on Linux (Arch Linux). Basically I have: userX in groupX fileX userX:groupX ---rwx---- What puzzles me: I cannot perform ...
1
vote
2answers
199 views

Installing `setfacl` on Cent OS 6

My apologies if this is the wrong Stack Exchange for this sort of question — it seems like the most appropriate. Which yum package should I install to get the setfacl command on my linux virtual ...
5
votes
1answer
2k views

setfacl: Are these two commands the same?

I have a deployment script (based on capifony) that sets te permissions on specific servers for a Symfony2 installation. It contains the following two commands to do this for several directories: ...
0
votes
1answer
85 views

Webserver-User has no Shell-Access but needs SSH-Keys or Permission change of directory?

First of all: English is NOT my mother-tongue, so please bear with me if something is not as clean as it should be. So, regarding my previous question and a possible solution I was advised to ask for ...
5
votes
1answer
186 views

Using ACL with Multiple Default Groups

I have looked though the answers to similar questions and refreshed my memory on ACLs by reading tutorials on Linux ACLs. Yet, I am still stumped. What have I done wrong, or what do I not understand? ...
2
votes
2answers
112 views

setting default permissions with setfacl

I am trying to set default permissions on my directory structure using acl. I would like to have following default permissions for directories and for files respectively: drwx--x--- -rw-r----- but ...
2
votes
1answer
128 views

How to add a read only group permission to a folder that already has a default group, and have it inherited for all newly created files & folders?

In Windows this is easy. I never fully figured out Linux permissions, I have a directory such as this: /Photos The current ACL permissions are as follows: owner: root - full access group: photos ...
1
vote
2answers
204 views

UNIX ACL disadvantages [closed]

I have read a lot about how great UNIX ACLs are. For example, one good example can be viewed here. However, are there any disadvantages or configurations that cannot be expressed using ACL?
2
votes
1answer
563 views

setfacl default --x on directories and r— on files for user

Having the following directory structure [sr@server directory]$ tree . ├── folder1 │   ├── fileA │   └── fileB └── folder2 └── fileC 2 directories, 3 files I want to set a default facl on ...
1
vote
0answers
15 views

What forms of discretionary access control are there?

I know it's kind of an unguided question, but just so I have a broader sense of how things are I was interested in getting a reasonably complete list of discretionary access controls available on Unix ...
1
vote
1answer
189 views

Not allowed to read a file with correct group permissions? ACL?

I just set up a basic nginx server on my Debian 7.0 server. The config file /etc/nginx/nginx.conf is barely modified, and begings with: user www-data; # nginx shall run as user `www-data` I then ...
2
votes
1answer
140 views

setting default umask and user:group on directory

I have a directory data and I need to set default umask and ownership for all directories/files (both existing and future files). I want all files in data to have ownership root:martin ans ...
2
votes
2answers
52 views

How to manage authentication with multiple VPS's and GoogleApps?

I have a bunch of VPS's and every now and then I have to create another. Currently I use AWS, Rackspace and DigitalOcean as my IAAS providers. Most of them are Ubuntu-based. Besides, I have the users ...
2
votes
1answer
74 views

Using FACLs to restrict default group but allow others

So, I'm running RHEL 6.x with acls enabled, etc. and I've been fighting this ACL issue for a bit now and I can't seem to get it down. I'm trying to make it so that: /var/www/html/* are owned ...
2
votes
2answers
755 views

Giving www-data permision to Dropbox subfolder?

I want to give my website the permission to read files & folders from a Dropbox subfolder. I think I have added the correct permissions, but I can't get the www-data user to get access to the ...
3
votes
0answers
48 views

acl not overriding unix rights?

I have a folder with UNIX rights that forbid access to me : ls -l Sources-labo drwxrwxrw-+ 6 nobody applications 73728 févr. 25 13:25 Sources-labo groups users vault but the ACL are set so that ...
3
votes
2answers
3k views

How to determine if NFS mount is mounted as v3 or v4?

Red Hat 5/6 when I do mount it says type nfs, I would like to know how to determine version if it isn't listed in mount options or fstab. Please don't say remount it with the version option, I want ...
2
votes
2answers
39 views

Specialized access control for directories in RedHat

I have a requirement where I want to change permissions for a directory so that the directory owner (user/group) would be able to create files inside the directory and modify them, but won't be able ...
10
votes
2answers
455 views

Is there a Linux deep diff tool that also compares file attributes?

Is there a Linux tool like diff that will recursively compare files and directories, but with the addition of also comparing: extended attributes, acl's, se contexts?
3
votes
2answers
2k views

Chroot SFTP users who require access to multiple directories under same parent folder

I have a RHEL 6 server with a /Documents directory, and it has child directories 1 2 3 4 5.... right under the /Documents directory. Is it possible to create an SFTP chroot jail that only gives a ...
0
votes
3answers
52 views

Is it possible to create a file with the privileges of other users?

I am a user of the root account on the server named A. And I also own the accounts of user1 and user2. When I create a file or directory in the account of user1, I want the owner of the file to be ...
2
votes
0answers
1k views

CentOS 6.5 sound permissions

I am trying to configure ALSA for a CentOS 6.5 minimal install, my problem is non-root users do not have permission to access the sound devices in /dev/snd because the files are missing access control ...
1
vote
2answers
926 views

How to give permissions to user (regarding an NFS share)

There are two machines: "A" and "B". OS is SLES 9.4. "A" is the NFS server, "B" is the NFS client. "A" has exported an FS to "B". "B" mounted the NFS share. On both machines I have root permission. ...
0
votes
3answers
50 views

How do I allow rwx access to a specific group with ACLs?

How do I grant read, write and execute to specific group? What I did: adduser test addgroup developer setfacl -m g:developer:rwx /opt/spago41/ When I login as test I can't run: startup.sh in ...
0
votes
2answers
195 views

Problem with file permissions in shared directory under /srv between OS X and Ubuntu

I'm setting up some folders where any user in the users group can collaborate on files, on a Ubuntu 12.04 LTS server. It seems that users on my machine have no problems editing each other's files (I ...
0
votes
1answer
111 views

Other acl manipulation executables than getfacl/setfacl? [closed]

I am familiar with setfacl/getfacl. However, I am wondering if there are any other executables/packages that maintain similar functionality with regards to manipulating acl. I am not looking for ...
2
votes
2answers
2k views

ACL defaults not being obeyed on copy over NFS

I have an Arch Linux box that has a folder from an Ubuntu server mounted via NFS. I've set up an Access Control List on the folder on the server such that any new files should have their permissions ...
1
vote
3answers
2k views

Setting default username and group for files in directory

Using this helpful post I am able to set a default group and file permissions in a folder. I'm having trouble setting a default owner (teamlead uid 1234). setfacl -d -m g::rwx /my/test/folder ...
1
vote
1answer
170 views

ACL defaults: files vs directories

Default ACLs on a directory are inherited by files and subdirectories created under that directory. It seems a common requirement that by default subdirectories should be executable (i.e. cd-able) ...
1
vote
2answers
7k views

How do I set permissions recursively on a dir (with ACL enabled)?

For example, I want to give my colleagues write access to certain directory. Let's assume that subdirectories in it had access rights 775, files 664, and also there were some executable files in the ...
5
votes
1answer
79 views

Setting group permission on directory

I'm looking for the best way to give a group permission to view any files in /var/log, but only using cat or tail. My best guess right now is that I need to use ACL's: setfacl -mR default:g:group:4 ...
2
votes
0answers
139 views

New files getting wrong permissions from setacl

I'm trying to create a file from windows on a mapped samba share, but after creating the file, I'm unable to edit it. For some reason the mask is changing to rw- even though my default is set to rwx. ...
1
vote
1answer
439 views

Why does getfacl remove the leading / from absolute pathnames?

I'm in the midst of learning about ACL's for Centos/Red Hat 6 and when I run getfacl using an absolute path I of course get among the output: getfacl: Removing leading '/' from absolute path names ...
0
votes
1answer
862 views

What does the “flags” field in getfacl mean?

I'm trying to set permissions on a server between users using ACLs. When I'm checking their status on one of directories using getfacl dir10, it shows: root@svn:/srv/resources/somedir# getfacl dir10 ...
4
votes
1answer
1k views

Using setfacl to create recursive permissions for Apache with rsync

I have a Dokuwiki installation locally, which I regularly sync to my server with rsync. I'm also going to give a friend of mine an ssh account, and host his public Dokuwiki installation. However, I'm ...