ACL stands for access control list. ACLs extend permissions on files beyond the traditional user-group-others triple.

learn more… | top users | synonyms (1)

2
votes
3answers
7k views

Setting default username and group for files in directory

Using this helpful post I am able to set a default group and file permissions in a folder. I'm having trouble setting a default owner (teamlead uid 1234). setfacl -d -m g::rwx /my/test/folder ...
2
votes
2answers
275 views

setting default permissions with setfacl

I am trying to set default permissions on my directory structure using acl. I would like to have following default permissions for directories and for files respectively: drwx--x--- -rw-r----- but ...
2
votes
2answers
40 views

how to restrict a user to access the file

I have created a file which resides inside my directory on a unix server. People have sudo privileges. How can I restrict them to read that file (even when they have sudo previleges) ?
2
votes
1answer
97 views

How can I use setfacl to give no access to “other” users?

The command setfacl -dm g::rwx mydir sets permissions for groups to read-write-execute. I'd like to run a similar command such that other users (i.e. not the owner) have no access whatsoever, but ...
2
votes
2answers
47 views

Specialized access control for directories in RedHat

I have a requirement where I want to change permissions for a directory so that the directory owner (user/group) would be able to create files inside the directory and modify them, but won't be able ...
2
votes
2answers
895 views

HPUX setacl leaves uid behind

I have a shell script that I execute after uninstalling a web application. The script is meant to clean up permissions that were needed during the execution of the application. find /opt/path -exec ...
2
votes
3answers
175 views

User with read access to /home

Pardon my ignorance but I can't seem to come up with a solution to this one. I'd like to create a user that has read access to every user's home catalog located in /home. Do I need acl's for this or ...
2
votes
1answer
555 views

OpenLDAP Centos 6

I am trying to set up some ACLs (starting off with a simple userpassword ACL) on a new OpenLdap deployment. I am trying to get to grips with the new conf.d configuration format - but am struggling. ...
2
votes
2answers
83 views

SFTP clients uploading files with too restrictive rights

I have the following setup: Ubuntu 14.4 server offering SFTP service in a front-end area. External clients have the ability to upload files. A back-end process (on another server) tracks uploaded ...
2
votes
1answer
94 views

Using ACL Permissions without allowing other groups to access a directory?

0. Add user bkupusr to group extbk leeand00@hostname:/home/leeand00/$ sudo groupadd extbk leeand00@hostname:/home/leeand00/$ sudo usermod -G extbk bkupusr 1. Created directory structure: ...
2
votes
1answer
23 views

Can I use permissions or facls to limit the creation of files in a directory without limiting the creation of directories?

I have some directories with quite permissive permissions, which get cluttered up with files (scripts) created by lots of different users. I try to encourage people to create their own sub-directory ...
2
votes
1answer
670 views

How does ACL calculate the effective permissions on a file?

I ran the following command to give the wheel group rwx permissions on new files and subdirectories created: [belmin@server1]$ ls -la total 24 drwxr-sr-x+ 2 guards guards 4096 Aug 27 15:30 . ...
2
votes
1answer
389 views

How to add a read only group permission to a folder that already has a default group, and have it inherited for all newly created files & folders?

In Windows this is easy. I never fully figured out Linux permissions, I have a directory such as this: /Photos The current ACL permissions are as follows: owner: root - full access group: photos ...
2
votes
1answer
1k views

setfacl default --x on directories and r— on files for user

Having the following directory structure [sr@server directory]$ tree . ├── folder1 │   ├── fileA │   └── fileB └── folder2 └── fileC 2 directories, 3 files I want to set a default facl on ...
2
votes
1answer
1k views

Why does getfacl remove the leading / from absolute pathnames?

I'm in the midst of learning about ACL's for Centos/Red Hat 6 and when I run getfacl using an absolute path I of course get among the output: getfacl: Removing leading '/' from absolute path names ...
2
votes
1answer
30 views

ACL group permission still not allowing write permissions

There's a file called '/etc/file.conf' on my filesystem. $ getfacl /etc/file.conf getfacl: Removing leading '/' from absolute path names # file: etc/file.conf # owner: root # group: root user::rw- ...
2
votes
1answer
40 views

How can I use ACL to give one user control over a directory and all its contents

Two users, Foo and Bar. Foo wants Bar to work on a project in Foo's home dir. [foo]$ mkdir project [foo]$ # Set defaults [foo]$ setfacl -m d:u::rwx,d:g::rwx,d:o::--- project [foo]$ # Set defaults ...
2
votes
1answer
633 views

Set group ownership on FTP upload via an ACL

I am interested in setting an ACL which will chown all the files I upload through FTP to the www-data group. However, after performing chown -R user:www-data /var/www/website.com/public_html/ ...
2
votes
1answer
494 views

setting default umask and user:group on directory

I have a directory data and I need to set default umask and ownership for all directories/files (both existing and future files). I want all files in data to have ownership root:martin ans ...
2
votes
2answers
5k views

ACL defaults not being obeyed on copy over NFS

I have an Arch Linux box that has a folder from an Ubuntu server mounted via NFS. I've set up an Access Control List on the folder on the server such that any new files should have their permissions ...
2
votes
1answer
2k views

How to use Extended ACL's on AIX?

Using AIX (6.1) FTPD, a user needs to log in and it should only reach 2 directories (read/write) in the system, ex.: /foo/sth1 and /foo2/sth2 Besised the users home directory it shouldn't reach ...
2
votes
1answer
490 views

Issues while untaring tarball with acl

I am getting an error “Unknown file type 'A', extracted as normal file” while un-taring a set of files which has acl permissions set. I had created the tar file in Solaris with tar -cpfv ...
2
votes
1answer
89 views

Get rights for specific user on file/dir

I'm searching for a command that essentially would do the following: check which rights a user has on a file/dir (including ACL) and return it. E.g. say you have the following directory: -rw-r--r-- ...
2
votes
0answers
61 views

What is the effect of ACLs/umask on the permissions of the executable file generated by gcc?

I have been wondering how gcc determines the resulting file permissions of the executable file being generated. To gain some insight, I considered a minimalistic program test.c #include ...
2
votes
0answers
66 views

Cross-NFS file move adds ACL

Moving a file from one NFS4 mount to another adds an ACL. The reason, if I understand the process correctly, is that mv queries the system.nfs4_acl extended attribute of the source file, and uses the ...
2
votes
0answers
147 views

How do I recursively apply default ACLs of a directory to its descendants?

If I have a directory with default ACL entries assigned to it, but some or all of its descendant files and sub-directories have access or default ACLs that do not agree with those defaults, how do I ...
2
votes
1answer
110 views

Using FACLs to restrict default group but allow others

So, I'm running RHEL 6.x with acls enabled, etc. and I've been fighting this ACL issue for a bit now and I can't seem to get it down. I'm trying to make it so that: /var/www/html/* are owned ...
2
votes
0answers
2k views

CentOS 6.5 sound permissions

I am trying to configure ALSA for a CentOS 6.5 minimal install, my problem is non-root users do not have permission to access the sound devices in /dev/snd because the files are missing access control ...
2
votes
0answers
230 views

New files getting wrong permissions from setacl

I'm trying to create a file from windows on a mapped samba share, but after creating the file, I'm unable to edit it. For some reason the mask is changing to rw- even though my default is set to rwx. ...
2
votes
1answer
103 views

Copying a file on a JFS filesystem, does not follow ACL guidelines

I have a JFS filesystem /dev/md2 on /mnt/hd2 type jfs (rw) to which I'm trying to copy some folders into target folder /mnt/hd2/videos/movies/. NOTE: I'm actually not using this target folder ...
2
votes
1answer
232 views

Chown and the risk of corrupting the backup disk

I am about to modify the file ownership recursively in a filesystem that uses ACLs. Because it is my backup disk, I thought I'd solicit comments on the script before I run it. #!/bin/bash # Replace ...
1
vote
2answers
542 views

UNIX ACL disadvantages [closed]

I have read a lot about how great UNIX ACLs are. For example, one good example can be viewed here. However, are there any disadvantages or configurations that cannot be expressed using ACL?
1
vote
3answers
2k views

exim4 on debian: why does this ACL work when testing with -bh but not in actual use?

I've got local_acl_check_data to reject the typical spammer tactic of using the same address as From: and To:, but since some less-spammy sources, such as Yahoo Groups, do this, I'm using a whitelist ...
1
vote
1answer
313 views

Set sticky bit by default for new directories via ACL?

I want to set up a directory where all new files and directories have a certain access mask and also the directories have the sticky bit set (the t one, which restricts deletion of files inside those ...
1
vote
1answer
245 views

AWS Outbound ACL Rules impact on incoming ssh connections

I am making a bastion ssh server on CentOS 7 in an AWS EC2 instance. When I use the following rules in its ACL, I am able to connect to the server just fine: Inbound Rules Allow traffic on port 22 ...
1
vote
2answers
926 views

Installing `setfacl` on Cent OS 6

My apologies if this is the wrong Stack Exchange for this sort of question — it seems like the most appropriate. Which yum package should I install to get the setfacl command on my linux virtual ...
1
vote
1answer
2k views

What does the “flags” field in getfacl mean?

I'm trying to set permissions on a server between users using ACLs. When I'm checking their status on one of directories using getfacl dir10, it shows: root@svn:/srv/resources/somedir# getfacl dir10 ...
1
vote
2answers
39 views

How to Backup and Compare File Permissions?

Is there a way you can setup a list of receipts of folders and directories of their correct default permissions that can be used as a backup to compare the correct permissions and be used to fix ...
1
vote
1answer
313 views

can’t set ACLs on FreeBSD UFS

$ sysctl -a | grep acl kern.features.ufs_acl: 1 vfs.acl_nfs4_old_semantics: 0 $ mount /dev/ada0p2 on / (ufs, local, journaled soft-updates) devfs on /dev (devfs, local, multilabel) devfs on ...
1
vote
1answer
85 views

What is the difference between these two sets of command for configuring ACL permissions?

Hi I am wondering what is the difference between the two sets of commands below: 1) To allow Davis to access and modify all files and folders in the the home directory of John # setfacl -m ...
1
vote
2answers
3k views

How to give permissions to user (regarding an NFS share)

There are two machines: "A" and "B". OS is SLES 9.4. "A" is the NFS server, "B" is the NFS client. "A" has exported an FS to "B". "B" mounted the NFS share. On both machines I have root permission. ...
1
vote
1answer
147 views

Why can't ACLs block users from having access to their own home directory?

CentOS 6.x In the process of studying ACLs, I came across this blurb in my training documentation: However with ACLs, you can't deny access for a user to his home directory While I can't think ...
1
vote
1answer
22 views

Does “defaults” option include “acl” option in /etc/fstab?

I'm working with ACLs on CentOS 7 and noticed that the partition (/) where ACLs are applied is mounted with defaults options. As far as I know ACLs need that the acl option is enabled in the mount, ...
1
vote
1answer
43 views

How are permissions in linux implemented?

It is in my knowledge that Linux implements a DAC-based model for file access control, however I recently came across the fact that ACL's have to manually be enabled in Linux. My question is: How ...
1
vote
2answers
48 views

What versions of Darwin's libacl have the acl_get_file bug?

In some versions of Darwin's libacl, there's a bug in the acl_get_file function in which in spuriously returns null and sets errno to ENOENT when passed paths to valid files. There are a decent number ...
1
vote
1answer
62 views

directory permissions [closed]

I'm currently working on a PHP server explorer, and I have to determine if a directory is empty or not readable because of insufficient permission. My web application is running under the user ...
1
vote
1answer
144 views

Who can change ACL permissions?

I'm using ACL to control access to individual roots of webs for different instances of Apache and different groups of admins. I've got a Unix group admins-web22 for admins of a particular website and ...
1
vote
1answer
139 views

User cannot access a file after setting an ACL [duplicate]

I cannot enter a directory after creation in a folder with an ACL: I am attempting to limit rwx access to a folder for just a single group and no one else. I would like to be able to add new users to ...
1
vote
1answer
149 views

Give a user the permission to access files in a directory

I have mounted a volume from NAS storage to my Solaris 10 machine using NFS. I want to give read/write permission for a user to the directories and subdirectories and files. I have tried setfacl -m ...
1
vote
1answer
530 views

Not allowed to read a file with correct group permissions? ACL?

I just set up a basic nginx server on my Debian 7.0 server. The config file /etc/nginx/nginx.conf is barely modified, and begings with: user www-data; # nginx shall run as user `www-data` I then ...