ACL stands for access control list. ACLs extend permissions on files beyond the traditional user-group-others triple.

learn more… | top users | synonyms (1)

2
votes
1answer
285 views

How to add a read only group permission to a folder that already has a default group, and have it inherited for all newly created files & folders?

In Windows this is easy. I never fully figured out Linux permissions, I have a directory such as this: /Photos The current ACL permissions are as follows: owner: root - full access group: photos ...
2
votes
1answer
1k views

setfacl default --x on directories and r— on files for user

Having the following directory structure [sr@server directory]$ tree . ├── folder1 │   ├── fileA │   └── fileB └── folder2 └── fileC 2 directories, 3 files I want to set a default facl on ...
2
votes
1answer
770 views

Why does getfacl remove the leading / from absolute pathnames?

I'm in the midst of learning about ACL's for Centos/Red Hat 6 and when I run getfacl using an absolute path I of course get among the output: getfacl: Removing leading '/' from absolute path names ...
2
votes
1answer
29 views

Using ACL Permissions without allowing other groups to access a directory?

0. Add user bkupusr to group extbk leeand00@hostname:/home/leeand00/$ sudo groupadd extbk leeand00@hostname:/home/leeand00/$ sudo usermod -G extbk bkupusr 1. Created directory structure: ...
2
votes
1answer
35 views

ACLs and classic permissions

I'm trying to set up a git server on my FreeNAS server. The problem I have is with setting up the permissions for different users/groups just as I want. Basically I have two different groups: ...
2
votes
1answer
283 views

Set group ownership on FTP upload via an ACL

I am interested in setting an ACL which will chown all the files I upload through FTP to the www-data group. However, after performing chown -R user:www-data /var/www/website.com/public_html/ ...
2
votes
1answer
289 views

setting default umask and user:group on directory

I have a directory data and I need to set default umask and ownership for all directories/files (both existing and future files). I want all files in data to have ownership root:martin ans ...
2
votes
2answers
72 views

How to manage authentication with multiple VPS's and GoogleApps?

I have a bunch of VPS's and every now and then I have to create another. Currently I use AWS, Rackspace and DigitalOcean as my IAAS providers. Most of them are Ubuntu-based. Besides, I have the users ...
2
votes
2answers
4k views

ACL defaults not being obeyed on copy over NFS

I have an Arch Linux box that has a folder from an Ubuntu server mounted via NFS. I've set up an Access Control List on the folder on the server such that any new files should have their permissions ...
2
votes
1answer
1k views

How to use Extended ACL's on AIX?

Using AIX (6.1) FTPD, a user needs to log in and it should only reach 2 directories (read/write) in the system, ex.: /foo/sth1 and /foo2/sth2 Besised the users home directory it shouldn't reach ...
2
votes
1answer
438 views

Issues while untaring tarball with acl

I am getting an error “Unknown file type 'A', extracted as normal file” while un-taring a set of files which has acl permissions set. I had created the tar file in Solaris with tar -cpfv ...
2
votes
1answer
88 views

Get rights for specific user on file/dir

I'm searching for a command that essentially would do the following: check which rights a user has on a file/dir (including ACL) and return it. E.g. say you have the following directory: -rw-r--r-- ...
2
votes
0answers
35 views

Cross-NFS file move adds ACL

Moving a file from one NFS4 mount to another adds an ACL. The reason, if I understand the process correctly, is that mv queries the system.nfs4_acl extended attribute of the source file, and uses the ...
2
votes
1answer
74 views

OSX/Darwin ACL Format

In OS X, if you want to view the ACL information on a file, you can do so with the -e option of `ls. $ ls -lde app/cache drwxrwxr-x+ 7 alanstorm staff 238 Apr 1 10:02 app/cache 0: user:alanstorm ...
2
votes
1answer
93 views

Using FACLs to restrict default group but allow others

So, I'm running RHEL 6.x with acls enabled, etc. and I've been fighting this ACL issue for a bit now and I can't seem to get it down. I'm trying to make it so that: /var/www/html/* are owned ...
2
votes
0answers
1k views

CentOS 6.5 sound permissions

I am trying to configure ALSA for a CentOS 6.5 minimal install, my problem is non-root users do not have permission to access the sound devices in /dev/snd because the files are missing access control ...
2
votes
0answers
195 views

New files getting wrong permissions from setacl

I'm trying to create a file from windows on a mapped samba share, but after creating the file, I'm unable to edit it. For some reason the mask is changing to rw- even though my default is set to rwx. ...
2
votes
1answer
87 views

Copying a file on a JFS filesystem, does not follow ACL guidelines

I have a JFS filesystem /dev/md2 on /mnt/hd2 type jfs (rw) to which I'm trying to copy some folders into target folder /mnt/hd2/videos/movies/. NOTE: I'm actually not using this target folder ...
2
votes
1answer
228 views

Chown and the risk of corrupting the backup disk

I am about to modify the file ownership recursively in a filesystem that uses ACLs. Because it is my backup disk, I thought I'd solicit comments on the script before I run it. #!/bin/bash # Replace ...
1
vote
2answers
399 views

UNIX ACL disadvantages [closed]

I have read a lot about how great UNIX ACLs are. For example, one good example can be viewed here. However, are there any disadvantages or configurations that cannot be expressed using ACL?
1
vote
2answers
1k views

exim4 on debian: why does this ACL work when testing with -bh but not in actual use?

I've got local_acl_check_data to reject the typical spammer tactic of using the same address as From: and To:, but since some less-spammy sources, such as Yahoo Groups, do this, I'm using a whitelist ...
1
vote
2answers
566 views

Installing `setfacl` on Cent OS 6

My apologies if this is the wrong Stack Exchange for this sort of question — it seems like the most appropriate. Which yum package should I install to get the setfacl command on my linux virtual ...
1
vote
1answer
2k views

What does the “flags” field in getfacl mean?

I'm trying to set permissions on a server between users using ACLs. When I'm checking their status on one of directories using getfacl dir10, it shows: root@svn:/srv/resources/somedir# getfacl dir10 ...
1
vote
1answer
54 views

Set sticky bit by default for new directories via ACL?

I want to set up a directory where all new files and directories have a certain access mask and also the directories have the sticky bit set (the t one, which restricts deletion of files inside those ...
1
vote
1answer
75 views

AWS Outbound ACL Rules impact on incoming ssh connections

I am making a bastion ssh server on CentOS 7 in an AWS EC2 instance. When I use the following rules in its ACL, I am able to connect to the server just fine: Inbound Rules Allow traffic on port 22 ...
1
vote
1answer
46 views

What is the difference between these two sets of command for configuring ACL permissions?

Hi I am wondering what is the difference between the two sets of commands below: 1) To allow Davis to access and modify all files and folders in the the home directory of John # setfacl -m ...
1
vote
2answers
2k views

How to give permissions to user (regarding an NFS share)

There are two machines: "A" and "B". OS is SLES 9.4. "A" is the NFS server, "B" is the NFS client. "A" has exported an FS to "B". "B" mounted the NFS share. On both machines I have root permission. ...
1
vote
1answer
94 views

Why can't ACLs block users from having access to their own home directory?

CentOS 6.x In the process of studying ACLs, I came across this blurb in my training documentation: However with ACLs, you can't deny access for a user to his home directory While I can't think ...
1
vote
1answer
50 views

Who can change ACL permissions?

I'm using ACL to control access to individual roots of webs for different instances of Apache and different groups of admins. I've got a Unix group admins-web22 for admins of a particular website and ...
1
vote
1answer
94 views

can’t set ACLs on FreeBSD UFS

$ sysctl -a | grep acl kern.features.ufs_acl: 1 vfs.acl_nfs4_old_semantics: 0 $ mount /dev/ada0p2 on / (ufs, local, journaled soft-updates) devfs on /dev (devfs, local, multilabel) devfs on ...
1
vote
2answers
107 views

How do I know ACLs are supported on my file system?

Is it enough to see getfacl giving no error, or do I have to check some other place to see whether or not ACLs are supported by the file systems?
1
vote
1answer
70 views

User cannot access a file after setting an ACL [duplicate]

I cannot enter a directory after creation in a folder with an ACL: I am attempting to limit rwx access to a folder for just a single group and no one else. I would like to be able to add new users to ...
1
vote
1answer
263 views

How does ACL calculate the effective permissions on a file?

I ran the following command to give the wheel group rwx permissions on new files and subdirectories created: [belmin@server1]$ ls -la total 24 drwxr-sr-x+ 2 guards guards 4096 Aug 27 15:30 . ...
1
vote
1answer
108 views

Give a user the permission to access files in a directory

I have mounted a volume from NAS storage to my Solaris 10 machine using NFS. I want to give read/write permission for a user to the directories and subdirectories and files. I have tried setfacl -m ...
1
vote
1answer
345 views

Not allowed to read a file with correct group permissions? ACL?

I just set up a basic nginx server on my Debian 7.0 server. The config file /etc/nginx/nginx.conf is barely modified, and begings with: user www-data; # nginx shall run as user `www-data` I then ...
1
vote
1answer
236 views

ACL defaults: files vs directories

Default ACLs on a directory are inherited by files and subdirectories created under that directory. It seems a common requirement that by default subdirectories should be executable (i.e. cd-able) ...
1
vote
3answers
389 views

Group+rx permission only in directories using ACL?

I need to install acl in order to set up a very specific permission structure. Group members should be able to see the files in a directory and change into the subdirectories. However, they should not ...
1
vote
1answer
256 views

Enable ACL on ArchLinux

Hi i'm trying to enable ACL on my filesystem. this are the steps install acl with # pacman -S acl edit /home entry on /etc/fstab /dev/sdb4 /home ext4 defaults,acl,noatime ...
1
vote
1answer
114 views

Function of owning group versus ACL group permissions

Given the fact that we can give any number of groups rwx via POSIX ACL's is there any special privileges given to the owning group? For example, we can set any number of users with ACL's but only the ...
1
vote
1answer
90 views

Allowing user access to mailman python files from root?

I just got my first managed VPS, and am taking a crash course in administering users. I normally do most things on my local computer as root. It is running centos-5-x86_64. What I'm trying to do is ...
1
vote
0answers
41 views

Is it possible to change file permissions when copying

I have a directory with default ACL permissions that get copied to all files created in that directory, but only if they are created in that directory. Would it be possible to change the permissions ...
1
vote
0answers
15 views

ACL doesn't always get inherited

Solaris platform. why is it that "sometimes" a file copied into a directory that has a default ACL attribute does not inherit that ACL? Other times it does.
1
vote
0answers
39 views

OS X: Apply inheritable ACL permissions to pre-existing subfolders and files

I have a folder with numerous ACL permissions set. Most of these include file_inherit and directory_inherit permissions and therefore should be, and are, automatically propagated to any new ...
1
vote
0answers
21 views

Is there a way to backup and restore ACL file and folder permissions on linux the way that there is using icacls in Windows? [duplicate]

In Windows you can do this (backup and restore ACL permissions) can you do this in Linux? And to clarify, I mean ACLs in Linux, I do not mean the default permissions modified with chmod / chown.
1
vote
0answers
10 views

How can I cause cvs update to use the destination folder's default posix acl mask?

I have a directory and file with these permissions: # file: blue/ # owner: user-a # group: group-a user::rwx user:user-b:rwx group::rwx mask::rwx other::r-x default:user::rwx default:user:user-b:rwx ...
1
vote
0answers
14 views

Problem using Access control lists for new users, ex ( afolder created in skel directoy have acl set, it should apply to new users)

I have a doubt regarding ACL I want to give permissions to a group using ACL A directory created in SKEL directory needs to have a default ACL set that allows the members of the group “linux” to ...
1
vote
0answers
40 views

Why doesn't the owning group get the executable bit? [duplicate]

Playing with ACL's: [root@rex web]# pwd /media/web [root@rex web]# ll -d drwxr-xr-x. 2 root root 4096 Jan 1 14:31 . [root@rex web]# setfacl -m d:g::rwx . [root@rex web]# setfacl -m g::rwx . ...
1
vote
1answer
99 views

ZFS ACL (NFS4 ACL)

I'm using Openindiana (Solaris 10) containers and I want to let users upload web content over sftp I'v managed to setup internal-sftp of openssh and lock user under web root. All the files under web ...
1
vote
0answers
53 views

Copying files to a directory shared via ACL doesn't get default mask

I'm trying to setup a simple shared directory on an ext4 filesystem for a group of users to work on. Let's say i just need to give all permissions to all users belonging to the group "workgroup" to ...
1
vote
0answers
99 views

How do I recursively apply default ACLs of a directory to its descendants?

If I have a directory with default ACL entries assigned to it, but some or all of its descendant files and sub-directories have access or default ACLs that do not agree with those defaults, how do I ...