ACL stands for access control list. ACLs extend permissions on files beyond the traditional user-group-others triple.

learn more… | top users | synonyms (1)

3
votes
2answers
241 views

ACLs and classic permissions

I'm trying to set up a git server on my FreeNAS server. The problem I have is with setting up the permissions for different users/groups just as I want. Basically I have two different groups: git-...
3
votes
1answer
673 views

setting default umask and user:group on directory

I have a directory data and I need to set default umask and ownership for all directories/files (both existing and future files). I want all files in data to have ownership root:martin ans ...
3
votes
2answers
111 views

How to manage authentication with multiple VPS's and GoogleApps?

I have a bunch of VPS's and every now and then I have to create another. Currently I use AWS, Rackspace and DigitalOcean as my IAAS providers. Most of them are Ubuntu-based. Besides, I have the users ...
3
votes
2answers
5k views

Chroot SFTP users who require access to multiple directories under same parent folder

I have a RHEL 6 server with a /Documents directory, and it has child directories 1 2 3 4 5.... right under the /Documents directory. Is it possible to create an SFTP chroot jail that only gives a ...
3
votes
1answer
148 views

Richacl invalid argument when trying to set atributes

I've compiled a kernel to use richacls, and compiled the richacl's utility, (but not the e2fsprogs). I've mounted a loop file with richacl flags /root/fs_prueba_10mb on /media/ext4_con_richacl type ...
3
votes
1answer
205 views

Change who is able to chmod

Is there a way to change who can chmod (change the permissions of) a particular file? It is only the owner of the file (without sudo-ing it), if my experimentation has been correct? But what I want ...
3
votes
1answer
2k views

How do I make all current and future files in a directory readable by a certain group/user?

I have a "Drop Box" directory for students to submit assignments. Its permissions are set to "drwx-wx---" where all of the students belong to the group. This lets them write to but not read from the ...
3
votes
1answer
55 views

ACL not working on directories

For some reason when I create new file from Windows I can change the permissions just fine but when I create a folder it won't let me change the permissions, I get this error: A device attached to ...
3
votes
0answers
97 views

acl not overriding unix rights?

I have a folder with UNIX rights that forbid access to me : ls -l Sources-labo drwxrwxrw-+ 6 nobody applications 73728 févr. 25 13:25 Sources-labo groups users vault but the ACL are set so that ...
3
votes
0answers
749 views

“Operation not supported” for setfacl inside a python script [closed]

I've programmed a script using python which logs in as root on the host machine and executes some commands. Therefore it uses ssh. I want to setup acl. If I do following commands in the command line, ...
2
votes
2answers
1k views

Installing `setfacl` on Cent OS 6

My apologies if this is the wrong Stack Exchange for this sort of question — it seems like the most appropriate. Which yum package should I install to get the setfacl command on my linux virtual ...
2
votes
2answers
344 views

setting default permissions with setfacl

I am trying to set default permissions on my directory structure using acl. I would like to have following default permissions for directories and for files respectively: drwx--x--- -rw-r----- but ...
2
votes
2answers
41 views

Properly set execute bit based on file type?

I'm trying to cleanup permissions on an Apache web server. I'm finding lots of files with the execute bit that don't customarily have it (or should not have it): $ sudo find /var/www/html -executable ...
2
votes
2answers
47 views

how to restrict a user to access the file

I have created a file which resides inside my directory on a unix server. People have sudo privileges. How can I restrict them to read that file (even when they have sudo previleges) ?
2
votes
1answer
123 views

How can I use setfacl to give no access to “other” users?

The command setfacl -dm g::rwx mydir sets permissions for groups to read-write-execute. I'd like to run a similar command such that other users (i.e. not the owner) have no access whatsoever, but ...
2
votes
2answers
50 views

Specialized access control for directories in RedHat

I have a requirement where I want to change permissions for a directory so that the directory owner (user/group) would be able to create files inside the directory and modify them, but won't be able ...
2
votes
2answers
963 views

HPUX setacl leaves uid behind

I have a shell script that I execute after uninstalling a web application. The script is meant to clean up permissions that were needed during the execution of the application. find /opt/path -exec ...
2
votes
1answer
23 views

Problem overriding ACL for default group ownership

I am unable to override previously set ACL settings. This is what it looks like: root@ip-xxx-xxx:/srv/www# getfacl grace.staging.site.com.au/ # file: grace.staging.site.com.au/ # owner: web # group: ...
2
votes
1answer
33 views

ACL and plain old permissions

I have read a bunch of articles, but still cannot get an idea of ACL, so I have following questions. What are benefits of using ACL over old permissions (0777 for example) and changing file owner,...
2
votes
1answer
42 views

Can directories and file inherit same permissions as parent directory?

I want all directories and files to inherit same permissions as parent directory.
2
votes
1answer
1k views

How does ACL calculate the effective permissions on a file?

I ran the following command to give the wheel group rwx permissions on new files and subdirectories created: [belmin@server1]$ ls -la total 24 drwxr-sr-x+ 2 guards guards 4096 Aug 27 15:30 . drwxr-...
2
votes
3answers
179 views

User with read access to /home

Pardon my ignorance but I can't seem to come up with a solution to this one. I'd like to create a user that has read access to every user's home catalog located in /home. Do I need acl's for this or ...
2
votes
1answer
561 views

OpenLDAP Centos 6

I am trying to set up some ACLs (starting off with a simple userpassword ACL) on a new OpenLdap deployment. I am trying to get to grips with the new conf.d configuration format - but am struggling. ...
2
votes
1answer
189 views

Using ACL Permissions without allowing other groups to access a directory?

0. Add user bkupusr to group extbk leeand00@hostname:/home/leeand00/$ sudo groupadd extbk leeand00@hostname:/home/leeand00/$ sudo usermod -G extbk bkupusr 1. Created directory structure: leeand00@...
2
votes
1answer
27 views

Can I use permissions or facls to limit the creation of files in a directory without limiting the creation of directories?

I have some directories with quite permissive permissions, which get cluttered up with files (scripts) created by lots of different users. I try to encourage people to create their own sub-directory ...
2
votes
1answer
439 views

How to add a read only group permission to a folder that already has a default group, and have it inherited for all newly created files & folders?

In Windows this is easy. I never fully figured out Linux permissions, I have a directory such as this: /Photos The current ACL permissions are as follows: owner: root - full access group: photos -...
2
votes
1answer
2k views

setfacl default --x on directories and r— on files for user

Having the following directory structure [sr@server directory]$ tree . ├── folder1 │   ├── fileA │   └── fileB └── folder2 └── fileC 2 directories, 3 files I want to set a default facl on ...
2
votes
1answer
54 views

ACL group permission still not allowing write permissions

There's a file called '/etc/file.conf' on my filesystem. $ getfacl /etc/file.conf getfacl: Removing leading '/' from absolute path names # file: etc/file.conf # owner: root # group: root user::rw- ...
2
votes
1answer
73 views

How can I use ACL to give one user control over a directory and all its contents

Two users, Foo and Bar. Foo wants Bar to work on a project in Foo's home dir. [foo]$ mkdir project [foo]$ # Set defaults [foo]$ setfacl -m d:u::rwx,d:g::rwx,d:o::--- project [foo]$ # Set defaults ...
2
votes
1answer
284 views

Who can change ACL permissions?

I'm using ACL to control access to individual roots of webs for different instances of Apache and different groups of admins. I've got a Unix group admins-web22 for admins of a particular website and ...
2
votes
1answer
810 views

Set group ownership on FTP upload via an ACL

I am interested in setting an ACL which will chown all the files I upload through FTP to the www-data group. However, after performing chown -R user:www-data /var/www/website.com/public_html/ ...
2
votes
2answers
7k views

ACL defaults not being obeyed on copy over NFS

I have an Arch Linux box that has a folder from an Ubuntu server mounted via NFS. I've set up an Access Control List on the folder on the server such that any new files should have their permissions ...
2
votes
1answer
2k views

How to use Extended ACL's on AIX?

Using AIX (6.1) FTPD, a user needs to log in and it should only reach 2 directories (read/write) in the system, ex.: /foo/sth1 and /foo2/sth2 Besised the users home directory it shouldn't reach ...
2
votes
1answer
522 views

Issues while untaring tarball with acl

I am getting an error “Unknown file type 'A', extracted as normal file” while un-taring a set of files which has acl permissions set. I had created the tar file in Solaris with tar -cpfv Tarfilename....
2
votes
1answer
89 views

Get rights for specific user on file/dir

I'm searching for a command that essentially would do the following: check which rights a user has on a file/dir (including ACL) and return it. E.g. say you have the following directory: -rw-r--r-- ...
2
votes
0answers
56 views

Permissions (ACL) to allow creation of new files only - are extended attributes also needed?

I want to use a directory as a sort of drop-off point, similar to the Public folder in each Mac OS X home directory, that is: certain users (or everyone) should be able to create new files inside this ...
2
votes
0answers
26 views

How do I specify a relative change to ACL of current user/group?

I have a directory that already might have some subdirectory configured rwx for www-data, but I want to make a final pass and ensure www-data has a full read access on the full directory. All these ...
2
votes
0answers
73 views

What is the effect of ACLs/umask on the permissions of the executable file generated by gcc?

I have been wondering how gcc determines the resulting file permissions of the executable file being generated. To gain some insight, I considered a minimalistic program test.c #include <fcntl.h&...
2
votes
2answers
2k views

Why do files created via Samba get different ACL (mask) permissions depending on the client OS?

I tested this on a clean install of Debian Jessie, but I also have this problem on other machines (ex: Ubuntu 12.04). In addition to the base install, I installed sudo, samba, and cifs-utils. Shared ...
2
votes
0answers
83 views

Cross-NFS file move adds ACL

Moving a file from one NFS4 mount to another adds an ACL. The reason, if I understand the process correctly, is that mv queries the system.nfs4_acl extended attribute of the source file, and uses the ...
2
votes
0answers
199 views

How do I recursively apply default ACLs of a directory to its descendants?

If I have a directory with default ACL entries assigned to it, but some or all of its descendant files and sub-directories have access or default ACLs that do not agree with those defaults, how do I ...
2
votes
0answers
1k views

Samba 4.1.9 returning “access denied” trying to change share perms from Win client

UPDATE: version mismatch seemed to stop happening for some reason, although not sure why/at what point. Have a "public" (within LAN...like this) read-write share on a CentOS 6.4 box running, ...
2
votes
1answer
120 views

Using FACLs to restrict default group but allow others

So, I'm running RHEL 6.x with acls enabled, etc. and I've been fighting this ACL issue for a bit now and I can't seem to get it down. I'm trying to make it so that: /var/www/html/* are owned root:...
2
votes
0answers
2k views

CentOS 6.5 sound permissions

I am trying to configure ALSA for a CentOS 6.5 minimal install, my problem is non-root users do not have permission to access the sound devices in /dev/snd because the files are missing access control ...
2
votes
0answers
265 views

New files getting wrong permissions from setacl

I'm trying to create a file from windows on a mapped samba share, but after creating the file, I'm unable to edit it. For some reason the mask is changing to rw- even though my default is set to rwx. ...
2
votes
1answer
109 views

Copying a file on a JFS filesystem, does not follow ACL guidelines

I have a JFS filesystem /dev/md2 on /mnt/hd2 type jfs (rw) to which I'm trying to copy some folders into target folder /mnt/hd2/videos/movies/. NOTE: I'm actually not using this target folder ...
2
votes
1answer
232 views

Chown and the risk of corrupting the backup disk

I am about to modify the file ownership recursively in a filesystem that uses ACLs. Because it is my backup disk, I thought I'd solicit comments on the script before I run it. #!/bin/bash # Replace ...
1
vote
2answers
654 views

UNIX ACL disadvantages [closed]

I have read a lot about how great UNIX ACLs are. For example, one good example can be viewed here. However, are there any disadvantages or configurations that cannot be expressed using ACL?
1
vote
3answers
2k views

exim4 on debian: why does this ACL work when testing with -bh but not in actual use?

I've got local_acl_check_data to reject the typical spammer tactic of using the same address as From: and To:, but since some less-spammy sources, such as Yahoo Groups, do this, I'm using a whitelist ...
1
vote
3answers
87 views

Predefined group ids across Linux distros?

In order to successfully implement w/r access via ACL for external storage with ext4 fs I need to assign default group id for files on storage. LSB_5.0.0 say: This specification makes no attempt to ...