ACL stands for access control list. ACLs extend permissions on files beyond the traditional user-group-others triple.

learn more… | top users | synonyms (1)

0
votes
1answer
17 views

File/dir permission conundrum

I support a dev server for WordPress sites. Server is using the Nginx/php-fpm stack. I'm struggling with setting up file and directory permissions so that www-data has read and write access while our ...
5
votes
1answer
2k views

How do I edit a file and preserve its access control list / SELinux security context?

I'm on CentOS 6.2, and have a file with the alternate access method character displayed as a dot. ls -l myfile -rwxr-x---. 1 me mygroup 172 Aug 13 10:03 myfile ^ This dot. ...
0
votes
2answers
44 views

Solaris 11.2 extended permissions shown by ls

I have a file that shows up as having extended file permissions. ls -V /usr/share/X11/app-defaults/XScreenSaver rwx------ 1 root root 53 Dec 2 21:52 ...
1
vote
0answers
29 views

OS X: Apply inheritable ACL permissions to pre-existing subfolders and files

I have a folder with numerous ACL permissions set. Most of these include file_inherit and directory_inherit permissions and therefore should be, and are, automatically propagated to any new ...
3
votes
2answers
37 views

Back up and restore file permissions

Is there a way to back up and restore file ownership and permissions (the things that can be changed with chown and chmod)? You can do this in Windows using icacls. What about access control lists?
1
vote
0answers
19 views

Is there a way to backup and restore ACL file and folder permissions on linux the way that there is using icacls in Windows? [duplicate]

In Windows you can do this (backup and restore ACL permissions) can you do this in Linux? And to clarify, I mean ACLs in Linux, I do not mean the default permissions modified with chmod / chown.
1
vote
1answer
16 views

can’t set ACLs on FreeBSD UFS

$ sysctl -a | grep acl kern.features.ufs_acl: 1 vfs.acl_nfs4_old_semantics: 0 $ mount /dev/ada0p2 on / (ufs, local, journaled soft-updates) devfs on /dev (devfs, local, multilabel) devfs on ...
1
vote
0answers
5 views

How can I cause cvs update to use the destination folder's default posix acl mask?

I have a directory and file with these permissions: # file: blue/ # owner: user-a # group: group-a user::rwx user:user-b:rwx group::rwx mask::rwx other::r-x default:user::rwx default:user:user-b:rwx ...
7
votes
1answer
547 views

Using ACLs over read only/remote filesystem

I would like to define local ACLs to be used over a remotely mounted filesystem. The filesystem is mounted via autofs and sshfs FUSE. The idea is that we could setup a jailed user on a jump server ...
3
votes
1answer
98 views

Can ACLs override file perms on Linux?

I struggled with this problem on FreeBSD recently, but thank God for ZFS which solved it for me there. However I have it again in CentOS with ext4 and don't know if there is an easy way around it (or ...
1
vote
0answers
11 views

Problem using Access control lists for new users, ex ( afolder created in skel directoy have acl set, it should apply to new users)

I have a doubt regarding ACL I want to give permissions to a group using ACL A directory created in SKEL directory needs to have a default ACL set that allows the members of the group “linux” to ...
1
vote
1answer
20 views

What is the difference between these two sets of command for configuring ACL permissions?

Hi I am wondering what is the difference between the two sets of commands below: 1) To allow Davis to access and modify all files and folders in the the home directory of John # setfacl -m ...
2
votes
1answer
97 views

Set group ownership on FTP upload via an ACL

I am interested in setting an ACL which will chown all the files I upload through FTP to the www-data group. However, after performing chown -R user:www-data /var/www/website.com/public_html/ ...
1
vote
0answers
35 views

Why doesn't the owning group get the executable bit? [duplicate]

Playing with ACL's: [root@rex web]# pwd /media/web [root@rex web]# ll -d drwxr-xr-x. 2 root root 4096 Jan 1 14:31 . [root@rex web]# setfacl -m d:g::rwx . [root@rex web]# setfacl -m g::rwx . ...
1
vote
2answers
51 views

How do I know ACLs are supported on my file system?

Is it enough to see getfacl giving no error, or do I have to check some other place to see whether or not ACLs are supported by the file systems?
4
votes
2answers
126 views

Unix/Linux equivalent of Windows' Bypass Traverse Checking

Windows has a privilege called "Bypass Traverse Checking" (also known as SeChangeNotifyPrivilege). It allows the system to bypass ACL checks in parent objects so a user can [potentially] access a ...
2
votes
0answers
20 views

Cross-NFS file move adds ACL

Moving a file from one NFS4 mount to another adds an ACL. The reason, if I understand the process correctly, is that mv queries the system.nfs4_acl extended attribute of the source file, and uses the ...
3
votes
0answers
94 views

Does Samba 4 actually respect Unix file acls?

After researching the subject on the internet I drew a conclusion that Samba should take into account Unix file acls. During my tests I found the opposite. Only Unix file mode bits are respected, and ...
3
votes
1answer
95 views

How to find files/directories with specific ACL

How to I do something like find . -acl u:jim:rx find . -acl u:*:r find . -noacl u:jim:r etc. I know that the find command does not support this but, you have the idea. Are there any scripts, even ...
1
vote
0answers
51 views

ZFS ACL (NFS4 ACL)

I'm using Openindiana (Solaris 10) containers and I want to let users upload web content over sftp I'v managed to setup internal-sftp of openssh and lock user under web root. All the files under web ...
1
vote
1answer
32 views

User cannot access a file after setting an ACL [duplicate]

I cannot enter a directory after creation in a folder with an ACL: I am attempting to limit rwx access to a folder for just a single group and no one else. I would like to be able to add new users to ...
2
votes
1answer
59 views

OSX/Darwin ACL Format

In OS X, if you want to view the ACL information on a file, you can do so with the -e option of `ls. $ ls -lde app/cache drwxrwxr-x+ 7 alanstorm staff 238 Apr 1 10:02 app/cache 0: user:alanstorm ...
1
vote
2answers
34 views

facl ignoring the “x” permission but only on files

When I use setfacl to manage on what permissions should the children files / directories have, for some reason the files have all the permissions except the execute ("x") one. ...
4
votes
2answers
262 views

Precedence of user and group owner in file permissions

I just ran into something unexpected (for me) regarding file permissions on Linux (Arch Linux). Basically I have: userX in groupX fileX userX:groupX ---rwx---- What puzzles me: I cannot perform ...
1
vote
4answers
4k views

Howto set access control lists ACLs in OpenLDAP

I'm using the Debian Squeeze OpenLDAP. Where can I set ACLs? Isn't it possible to execute the access to directives with ldapmodify? There's no slapd.conf file in Debian, they use a slapd.d folder
1
vote
0answers
47 views

Copying files to a directory shared via ACL doesn't get default mask

I'm trying to setup a simple shared directory on an ext4 filesystem for a group of users to work on. Let's say i just need to give all permissions to all users belonging to the group "workgroup" to ...
1
vote
0answers
76 views

How do I recursively apply default ACLs of a directory to its descendants?

If I have a directory with default ACL entries assigned to it, but some or all of its descendant files and sub-directories have access or default ACLs that do not agree with those defaults, how do I ...
2
votes
1answer
193 views

setting default umask and user:group on directory

I have a directory data and I need to set default umask and ownership for all directories/files (both existing and future files). I want all files in data to have ownership root:martin ans ...
2
votes
2answers
9k views

How do I set permissions recursively on a dir (with ACL enabled)?

For example, I want to give my colleagues write access to certain directory. Let's assume that subdirectories in it had access rights 775, files 664, and also there were some executable files in the ...
1
vote
1answer
110 views

How does ACL calculate the effective permissions on a file?

I ran the following command to give the wheel group rwx permissions on new files and subdirectories created: [belmin@server1]$ ls -la total 24 drwxr-sr-x+ 2 guards guards 4096 Aug 27 15:30 . ...
2
votes
1answer
269 views

What relationships do tie ACL mask and standard group permission on a file?

At first I create a file and check it's standard permissions and ACL entries: $ touch file; ls -l file; getfacl file -rw-r--r-- 1 user user 0 Jul 30 16:26 file # file: file # owner: user # group: ...
1
vote
1answer
77 views

Give a user the permission to access files in a directory

I have mounted a volume from NAS storage to my Solaris 10 machine using NFS. I want to give read/write permission for a user to the directories and subdirectories and files. I have tried setfacl -m ...
0
votes
2answers
184 views

need give read write access to a folder and its subfolders and directories for a particular user

Could you help me to provide read/write access to a folder, its sub-folders and all the files below for a particular user? I tried to use the getfacl command, but didn't find a solution. I'm using ...
1
vote
0answers
757 views

Samba 4.1.9 returning “access denied” trying to change share perms from Win client

UPDATE: version mismatch seemed to stop happening for some reason, although not sure why/at what point. Have a "public" (within LAN...like this) read-write share on a CentOS 6.4 box running, ...
1
vote
1answer
158 views

How can I tell why I have permissions to read a file? [closed]

Here's what I just noticed on my CentOS SSH account: stat output $ stat /dev/kvm File: `/dev/kvm' Size: 0 Blocks: 0 IO Block: 4096 character special file Device: ...
4
votes
1answer
2k views

Using setfacl to create recursive permissions for Apache with rsync

I have a Dokuwiki installation locally, which I regularly sync to my server with rsync. I'm also going to give a friend of mine an ssh account, and host his public Dokuwiki installation. However, I'm ...
0
votes
1answer
175 views

setfacl remove all write access

I want to remove all write access to files & directories for any user or group while preserving other permissions. Is this possible?
3
votes
1answer
2k views

ACL is NOT enabled but it's working [duplicate]

How this is possible? ACL is not enabled in /etc/fstab, and I can verify it via manually opening fstab or running sudo mount | grep -i acl. But getfacl & setfacl Commands would work without any ...
1
vote
2answers
326 views

Installing `setfacl` on Cent OS 6

My apologies if this is the wrong Stack Exchange for this sort of question — it seems like the most appropriate. Which yum package should I install to get the setfacl command on my linux virtual ...
5
votes
1answer
3k views

setfacl: Are these two commands the same?

I have a deployment script (based on capifony) that sets te permissions on specific servers for a Symfony2 installation. It contains the following two commands to do this for several directories: ...
0
votes
1answer
106 views

Webserver-User has no Shell-Access but needs SSH-Keys or Permission change of directory?

First of all: English is NOT my mother-tongue, so please bear with me if something is not as clean as it should be. So, regarding my previous question and a possible solution I was advised to ask for ...
5
votes
1answer
277 views

Using ACL with Multiple Default Groups

I have looked though the answers to similar questions and refreshed my memory on ACLs by reading tutorials on Linux ACLs. Yet, I am still stumped. What have I done wrong, or what do I not understand? ...
2
votes
1answer
84 views

Using FACLs to restrict default group but allow others

So, I'm running RHEL 6.x with acls enabled, etc. and I've been fighting this ACL issue for a bit now and I can't seem to get it down. I'm trying to make it so that: /var/www/html/* are owned ...
6
votes
3answers
2k views

What roles do DAC (file permissions), ACL and MAC (SELinux) play in Linux file security?

I need some clarification/confirmation/elaboration on the different roles DAC, ACL and MAC play in Linux file security. After some research from the documentation, this is my understanding of the ...
2
votes
2answers
140 views

setting default permissions with setfacl

I am trying to set default permissions on my directory structure using acl. I would like to have following default permissions for directories and for files respectively: drwx--x--- -rw-r----- but ...
3
votes
2answers
2k views

Chroot SFTP users who require access to multiple directories under same parent folder

I have a RHEL 6 server with a /Documents directory, and it has child directories 1 2 3 4 5.... right under the /Documents directory. Is it possible to create an SFTP chroot jail that only gives a ...
2
votes
1answer
175 views

How to add a read only group permission to a folder that already has a default group, and have it inherited for all newly created files & folders?

In Windows this is easy. I never fully figured out Linux permissions, I have a directory such as this: /Photos The current ACL permissions are as follows: owner: root - full access group: photos ...
1
vote
2answers
298 views

UNIX ACL disadvantages [closed]

I have read a lot about how great UNIX ACLs are. For example, one good example can be viewed here. However, are there any disadvantages or configurations that cannot be expressed using ACL?
2
votes
1answer
721 views

setfacl default --x on directories and r— on files for user

Having the following directory structure [sr@server directory]$ tree . ├── folder1 │   ├── fileA │   └── fileB └── folder2 └── fileC 2 directories, 3 files I want to set a default facl on ...
1
vote
0answers
20 views

What forms of discretionary access control are there?

I know it's kind of an unguided question, but just so I have a broader sense of how things are I was interested in getting a reasonably complete list of discretionary access controls available on Unix ...