1
vote
1answer
40 views

How can I tell why I have permissions to read a file? [closed]

Here's what I just noticed on my CentOS SSH account: stat output $ stat /dev/kvm File: `/dev/kvm' Size: 0 Blocks: 0 IO Block: 4096 character special file Device: ...
0
votes
1answer
27 views

setfacl remove all write access

I want to remove all write access to files & directories for any user or group while preserving other permissions. Is this possible?
5
votes
1answer
98 views

Using ACL with Multiple Default Groups

I have looked though the answers to similar questions and refreshed my memory on ACLs by reading tutorials on Linux ACLs. Yet, I am still stumped. What have I done wrong, or what do I not understand? ...
2
votes
1answer
187 views

setfacl default --x on directories and r— on files for user

Having the following directory structure [sr@server directory]$ tree . ├── folder1 │   ├── fileA │   └── fileB └── folder2 └── fileC 2 directories, 3 files I want to set a default facl on ...
2
votes
2answers
156 views

How to determine if NFS mount is mounted as v3 or v4?

Red Hat 5/6 when I do mount it says type nfs, I would like to know how to determine version if it isn't listed in mount options or fstab. Please don't say remount it with the version option, I want ...
2
votes
2answers
33 views

Specialized access control for directories in RedHat

I have a requirement where I want to change permissions for a directory so that the directory owner (user/group) would be able to create files inside the directory and modify them, but won't be able ...
10
votes
2answers
312 views

Is there a Linux deep diff tool that also compares file attributes?

Is there a Linux tool like diff that will recursively compare files and directories, but with the addition of also comparing: extended attributes, acl's, se contexts?
3
votes
2answers
908 views

Chroot SFTP users who require access to multiple directories under same parent folder

I have a RHEL 6 server with a /Documents directory, and it has child directories 1 2 3 4 5.... right under the /Documents directory. Is it possible to create an SFTP chroot jail that only gives a ...
0
votes
3answers
43 views

Is it possible to create a file with the privileges of other users?

I am a user of the root account on the server named A. And I also own the accounts of user1 and user2. When I create a file or directory in the account of user1, I want the owner of the file to be ...
1
vote
1answer
118 views

ACL defaults: files vs directories

Default ACLs on a directory are inherited by files and subdirectories created under that directory. It seems a common requirement that by default subdirectories should be executable (i.e. cd-able) ...
0
votes
1answer
2k views

How do I set permissions recursively on a dir (with ACL enabled)?

For example, I want to give my colleagues write access to certain directory. Let's assume that subdirectories in it had access rights 775, files 664, and also there were some executable files in the ...
5
votes
1answer
60 views

Setting group permission on directory

I'm looking for the best way to give a group permission to view any files in /var/log, but only using cat or tail. My best guess right now is that I need to use ACL's: setfacl -mR default:g:group:4 ...
0
votes
1answer
451 views

What does the “flags” field in getfacl mean?

I'm trying to set permissions on a server between users using ACLs. When I'm checking their status on one of directories using getfacl dir10, it shows: root@svn:/srv/resources/somedir# getfacl dir10 ...
2
votes
3answers
358 views

Where is ACL data technically stored?

I'm studying ACLs and am confused on where this information technically resides. Is this just technically just meta data from inodes?
1
vote
1answer
48 views

Why can't ACLs block users from having access to their own home directory?

CentOS 6.x In the process of studying ACLs, I came across this blurb in my training documentation: However with ACLs, you can't deny access for a user to his home directory While I can't think ...
8
votes
1answer
370 views

How are ACL permissions processed and in what order do they apply to a given user action?

CentOS 6.4 I'm trying to better understand how filesystem ACL rules are processed and in what order ACL rules apply. For example, let's say users bob and joe belong to a group called sales. Let's ...
0
votes
1answer
101 views

What package is necessary to install for the getacl command? [closed]

CentOS 6.3 I'm studying Access Control Lists and for some reason, the getacl command isn't available. When I try running it, I get: [root@foobox test] getacl test.txt -bash: getacl: command not ...
0
votes
2answers
154 views

setfacl access issues

I have a list of users (user1,user2,user3,superuser). user1, user2 and user3 belong to a usergroup called normalusers . Now, I need to issue the access control list command for the user superuser to ...
1
vote
0answers
26 views

Setting up a shared folder with group: ACL and file creation [duplicate]

I'm very new to ACL, and at the moment I've been trying to set up a shared folder such that any user belonging to a certain group (lets call it "thegroup") can have full access to the folder (which ...
1
vote
1answer
179 views

Enable ACL on ArchLinux

Hi i'm trying to enable ACL on my filesystem. this are the steps install acl with # pacman -S acl edit /home entry on /etc/fstab /dev/sdb4 /home ext4 defaults,acl,noatime ...
3
votes
1answer
1k views

How does umask affect ACLs?

Can someone explain to me how umask affects the default mask of newly created files if ACLs are activated? Is there some documentation about this? Example: $ mkdir test_dir && cd test_dir $ ...
1
vote
1answer
81 views

Function of owning group versus ACL group permissions

Given the fact that we can give any number of groups rwx via POSIX ACL's is there any special privileges given to the owning group? For example, we can set any number of users with ACL's but only the ...
4
votes
2answers
669 views

How do I create a hierarchy of UNIX groups as below?

I need to create a hierarchy of UNIX groups. Something like below: A |\ | \ B c |\ D e |\ f g ...where A, B and D are UNIX groups and c,e,f and g are UNIX accounts that are members of those ...
2
votes
1answer
259 views

Issues while untaring tarball with acl

I am getting an error “Unknown file type 'A', extracted as normal file” while un-taring a set of files which has acl permissions set. I had created the tar file in Solaris with tar -cpfv ...
3
votes
0answers
499 views

“Operation not supported” for setfacl inside a python script [closed]

I've programmed a script using python which logs in as root on the host machine and executes some commands. Therefore it uses ssh. I want to setup acl. If I do following commands in the command line, ...
6
votes
3answers
1k views

What roles do DAC (file permissions), ACL and MAC (SELinux) play in Linux file security?

I need some clarification/confirmation/elaboration on the different roles DAC, ACL and MAC play in Linux file security. After some research from the documentation, this is my understanding of the ...