ACL stands for access control list. ACLs extend permissions on files beyond the traditional user-group-others triple.

learn more… | top users | synonyms (1)

2
votes
1answer
221 views

Chown and the risk of corrupting the backup disk

I am about to modify the file ownership recursively in a filesystem that uses ACLs. Because it is my backup disk, I thought I'd solicit comments on the script before I run it. #!/bin/bash # Replace ...
1
vote
2answers
94 views

UNIX ACL disadvantages [closed]

I have read a lot about how great UNIX ACLs are. For example, one good example can be viewed here. However, are there any disadvantages or configurations that cannot be expressed using ACL?
1
vote
3answers
3k views

Howto set access control lists ACLs in OpenLDAP

I'm using the Debian Squeeze OpenLDAP. Where can I set ACLs? Isn't it possible to execute the access to directives with ldapmodify? There's no slapd.conf file in Debian, they use a slapd.d folder
1
vote
2answers
1k views

exim4 on debian: why does this ACL work when testing with -bh but not in actual use?

I've got local_acl_check_data to reject the typical spammer tactic of using the same address as From: and To:, but since some less-spammy sources, such as Yahoo Groups, do this, I'm using a whitelist ...
1
vote
2answers
61 views

Installing `setfacl` on Cent OS 6

My apologies if this is the wrong Stack Exchange for this sort of question — it seems like the most appropriate. Which yum package should I install to get the setfacl command on my linux virtual ...
1
vote
3answers
547 views

Setting default username and group for files in directory

Using this helpful post I am able to set a default group and file permissions in a folder. I'm having trouble setting a default owner (teamlead uid 1234). setfacl -d -m g::rwx /my/test/folder ...
1
vote
2answers
353 views

How to give permissions to user (regarding an NFS share)

There are two machines: "A" and "B". OS is SLES 9.4. "A" is the NFS server, "B" is the NFS client. "A" has exported an FS to "B". "B" mounted the NFS share. On both machines I have root permission. ...
1
vote
1answer
48 views

Why can't ACLs block users from having access to their own home directory?

CentOS 6.x In the process of studying ACLs, I came across this blurb in my training documentation: However with ACLs, you can't deny access for a user to his home directory While I can't think ...
1
vote
1answer
40 views

How can I tell why I have permissions to read a file? [closed]

Here's what I just noticed on my CentOS SSH account: stat output $ stat /dev/kvm File: `/dev/kvm' Size: 0 Blocks: 0 IO Block: 4096 character special file Device: ...
1
vote
1answer
73 views

Not allowed to read a file with correct group permissions? ACL?

I just set up a basic nginx server on my Debian 7.0 server. The config file /etc/nginx/nginx.conf is barely modified, and begings with: user www-data; # nginx shall run as user `www-data` I then ...
1
vote
1answer
119 views

ACL defaults: files vs directories

Default ACLs on a directory are inherited by files and subdirectories created under that directory. It seems a common requirement that by default subdirectories should be executable (i.e. cd-able) ...
1
vote
1answer
281 views

Why does getfacl remove the leading / from absolute pathnames?

I'm in the midst of learning about ACL's for Centos/Red Hat 6 and when I run getfacl using an absolute path I of course get among the output: getfacl: Removing leading '/' from absolute path names ...
1
vote
3answers
224 views

Group+rx permission only in directories using ACL?

I need to install acl in order to set up a very specific permission structure. Group members should be able to see the files in a directory and change into the subdirectories. However, they should not ...
1
vote
1answer
179 views

Enable ACL on ArchLinux

Hi i'm trying to enable ACL on my filesystem. this are the steps install acl with # pacman -S acl edit /home entry on /etc/fstab /dev/sdb4 /home ext4 defaults,acl,noatime ...
1
vote
1answer
81 views

Function of owning group versus ACL group permissions

Given the fact that we can give any number of groups rwx via POSIX ACL's is there any special privileges given to the owning group? For example, we can set any number of users with ACL's but only the ...
1
vote
1answer
83 views

Allowing user access to mailman python files from root?

I just got my first managed VPS, and am taking a crash course in administering users. I normally do most things on my local computer as root. It is running centos-5-x86_64. What I'm trying to do is ...
1
vote
0answers
13 views

What forms of discretionary access control are there?

I know it's kind of an unguided question, but just so I have a broader sense of how things are I was interested in getting a reasonably complete list of discretionary access controls available on Unix ...
1
vote
0answers
26 views

Setting up a shared folder with group: ACL and file creation [duplicate]

I'm very new to ACL, and at the moment I've been trying to set up a shared folder such that any user belonging to a certain group (lets call it "thegroup") can have full access to the folder (which ...
1
vote
0answers
914 views

Windows domain account can't create files via samba share, but can do this in linux shell, why?

I'm migrating tomcat server from windows to linux (CentOS 6.3 64bit), and want to use samba to share tomcat directory to technical department staffs (windows domain users) with read+write rights. ...
1
vote
1answer
113 views

Why are directories created with permissions 2070 and files with 060 in a directory with setgid bit?

I have the following directory: $ ll -d neptune drwxrws---+ 5 beamin psych 4096 Mar 7 16:18 neptune $ getfacl neptune # file: neptune # owner: beamin # group: psych # flags: -s- user::rwx ...
0
votes
2answers
154 views

setfacl access issues

I have a list of users (user1,user2,user3,superuser). user1, user2 and user3 belong to a usergroup called normalusers . Now, I need to issue the access control list command for the user superuser to ...
0
votes
3answers
43 views

Is it possible to create a file with the privileges of other users?

I am a user of the root account on the server named A. And I also own the accounts of user1 and user2. When I create a file or directory in the account of user1, I want the owner of the file to be ...
0
votes
1answer
2k views

How do I set permissions recursively on a dir (with ACL enabled)?

For example, I want to give my colleagues write access to certain directory. Let's assume that subdirectories in it had access rights 775, files 664, and also there were some executable files in the ...
0
votes
1answer
455 views

What does the “flags” field in getfacl mean?

I'm trying to set permissions on a server between users using ACLs. When I'm checking their status on one of directories using getfacl dir10, it shows: root@svn:/srv/resources/somedir# getfacl dir10 ...
0
votes
2answers
39 views

need give read write access to a folder and its subfolders and directories for a particular user

Could you help me to provide read/write access to a folder, its sub-folders and all the files below for a particular user? I tried to use the getfacl command, but didn't find a solution. I'm using ...
0
votes
1answer
101 views

What package is necessary to install for the getacl command? [closed]

CentOS 6.3 I'm studying Access Control Lists and for some reason, the getacl command isn't available. When I try running it, I get: [root@foobox test] getacl test.txt -bash: getacl: command not ...
0
votes
1answer
26 views

Give a user the permission to access files in a directory

I have mounted a volume from NAS storage to my Solaris 10 machine using NFS. I want to give read/write permission for a user to the directories and subdirectories and files. I have tried setfacl -m ...
0
votes
1answer
27 views

setfacl remove all write access

I want to remove all write access to files & directories for any user or group while preserving other permissions. Is this possible?
0
votes
3answers
44 views

How do I allow rwx access to a specific group with ACLs?

How do I grant read, write and execute to specific group? What I did: adduser test addgroup developer setfacl -m g:developer:rwx /opt/spago41/ When I login as test I can't run: startup.sh in ...
0
votes
1answer
95 views

Other acl manipulation executables than getfacl/setfacl? [closed]

I am familiar with setfacl/getfacl. However, I am wondering if there are any other executables/packages that maintain similar functionality with regards to manipulating acl. I am not looking for ...
0
votes
1answer
35 views

How to identify which application is trying to access the unixbuild server?

The error message I am seeing is: Failed publickey for raj from 10.*.*.** port 34355 ssh2 Mar 18 05:22:34 unixbuild sshd[16956]: [ID 1000034 auth.info] Failed password for raj from 10.*.*.* port ...
0
votes
0answers
57 views

Samba 4.1.9 returning “access denied” trying to change share perms from Win client

UPDATE: version mismatch seemed to stop happening for some reason, although not sure why/at what point. Have a "public" (within LAN...like this) read-write share on a CentOS 6.4 box running, ...
0
votes
1answer
46 views

Webserver-User has no Shell-Access but needs SSH-Keys or Permission change of directory?

First of all: English is NOT my mother-tongue, so please bear with me if something is not as clean as it should be. So, regarding my previous question and a possible solution I was advised to ask for ...
0
votes
2answers
134 views

Problem with file permissions in shared directory under /srv between OS X and Ubuntu

I'm setting up some folders where any user in the users group can collaborate on files, on a Ubuntu 12.04 LTS server. It seems that users on my machine have no problems editing each other's files (I ...
0
votes
0answers
62 views

Problems with getting ACL to work on zfs zpool share

always used standard linux permissions, and I can only find guides where they want me to add ,acl after defaults in the /etc/fstab. How do i install acl when i use zfs ? I have tried mount my pool to ...