ACL stands for access control list. ACLs extend permissions on files beyond the traditional user-group-others triple.

learn more… | top users | synonyms (1)

2
votes
2answers
2k views

Why do files created via Samba get different ACL (mask) permissions depending on the client OS?

I tested this on a clean install of Debian Jessie, but I also have this problem on other machines (ex: Ubuntu 12.04). In addition to the base install, I installed sudo, samba, and cifs-utils. Shared ...
0
votes
2answers
467 views

Problem with file permissions in shared directory under /srv between OS X and Ubuntu

I'm setting up some folders where any user in the users group can collaborate on files, on a Ubuntu 12.04 LTS server. It seems that users on my machine have no problems editing each other's files (I ...
4
votes
1answer
126 views

OSX/Darwin ACL Format

In OS X, if you want to view the ACL information on a file, you can do so with the -e option of `ls. $ ls -lde app/cache drwxrwxr-x+ 7 alanstorm staff 238 Apr 1 10:02 app/cache 0: user:alanstorm ...
3
votes
1answer
54 views

ACL not working on directories

For some reason when I create new file from Windows I can change the permissions just fine but when I create a folder it won't let me change the permissions, I get this error: A device attached to ...
2
votes
1answer
120 views

Using FACLs to restrict default group but allow others

So, I'm running RHEL 6.x with acls enabled, etc. and I've been fighting this ACL issue for a bit now and I can't seem to get it down. I'm trying to make it so that: /var/www/html/* are owned root:...
2
votes
1answer
109 views

Copying a file on a JFS filesystem, does not follow ACL guidelines

I have a JFS filesystem /dev/md2 on /mnt/hd2 type jfs (rw) to which I'm trying to copy some folders into target folder /mnt/hd2/videos/movies/. NOTE: I'm actually not using this target folder ...
2
votes
1answer
232 views

Chown and the risk of corrupting the backup disk

I am about to modify the file ownership recursively in a filesystem that uses ACLs. Because it is my backup disk, I thought I'd solicit comments on the script before I run it. #!/bin/bash # Replace ...
1
vote
1answer
47 views

In pfSense what is the meaning of the “Target Categories” and “Target Categories for off-time” columns in the Groups ACL Screen?

In SquidGuard within pfSense 2.3.1 in the Groups ACL screen there are two columns in the Target Rules List Target Categories and Target Categories for off-time. Each value in the row has the values ...
1
vote
1answer
16 views

Permissions to allow files to be written, but not read, overwritten or modified

I'm setting up a file share for a small group (CIFS/samba on FreeNAS, so the base system is FreeBSD/ZFS using ACLs). I want to allow users to put stuff into a folder on the share - but not to be ...
1
vote
1answer
163 views

ZFS ACL (NFS4 ACL)

I'm using Openindiana (Solaris 10) containers and I want to let users upload web content over sftp I'v managed to setup internal-sftp of openssh and lock user under web root. All the files under web ...
0
votes
1answer
32 views

Cannot override default group permissions with ACL

I've set this ACL on a directory: root@<server_ip>:/srv/www# getfacl example.com/ # file: example.com/ # owner: web # group: www-data user::rwx group::r-x other::r-x default:user::rwx default:...
0
votes
1answer
43 views

apache httpd ACLs not working

What is the issue with the rule below <Directory /data/share/web/marketing/jacaranda> #AllowOverride All <Files "wp-login.php"> Order Deny,Allow Deny from all ...
0
votes
1answer
395 views

ACL contradict chmod

I have installed opencart 1.5.6.1 on Digital ocean ubuntu14.04 I have used "demo" as username and login by tightvnc opencart requird "www-data" as owner and group: $ sudo chown -R www-data:www-data /...
0
votes
1answer
162 views

Webserver-User has no Shell-Access but needs SSH-Keys or Permission change of directory?

First of all: English is NOT my mother-tongue, so please bear with me if something is not as clean as it should be. So, regarding my previous question and a possible solution I was advised to ask for ...
5
votes
0answers
55 views

group member unable to write to a group-writable file with reiserfs and extended ACLs

Users vi and rust share group rust and want to use some file in shared manner. rust$ ls -l myfile -rw-rw-r-- 1 vi rust 0 May 30 03:48 myfile rust$ stat myfile | grep Gid Access: (0664/-rw-rw-r--) ...
4
votes
0answers
36 views

Git with multiple users on other systems using setfacl?

I'm setting up a git environment where multiple developers will work with per project. We have 1 server running git, and 2 seperate servers, 1 live and 1 dev. on dev I created a group and added the ...
4
votes
0answers
253 views

Does Samba 4 actually respect Unix file acls?

After researching the subject on the internet I drew a conclusion that Samba should take into account Unix file acls. During my tests I found the opposite. Only Unix file mode bits are respected, and ...
3
votes
0answers
97 views

acl not overriding unix rights?

I have a folder with UNIX rights that forbid access to me : ls -l Sources-labo drwxrwxrw-+ 6 nobody applications 73728 févr. 25 13:25 Sources-labo groups users vault but the ACL are set so that ...
2
votes
0answers
56 views

Permissions (ACL) to allow creation of new files only - are extended attributes also needed?

I want to use a directory as a sort of drop-off point, similar to the Public folder in each Mac OS X home directory, that is: certain users (or everyone) should be able to create new files inside this ...
2
votes
0answers
25 views

How do I specify a relative change to ACL of current user/group?

I have a directory that already might have some subdirectory configured rwx for www-data, but I want to make a final pass and ensure www-data has a full read access on the full directory. All these ...
2
votes
0answers
73 views

What is the effect of ACLs/umask on the permissions of the executable file generated by gcc?

I have been wondering how gcc determines the resulting file permissions of the executable file being generated. To gain some insight, I considered a minimalistic program test.c #include <fcntl.h&...
2
votes
0answers
83 views

Cross-NFS file move adds ACL

Moving a file from one NFS4 mount to another adds an ACL. The reason, if I understand the process correctly, is that mv queries the system.nfs4_acl extended attribute of the source file, and uses the ...
2
votes
0answers
199 views

How do I recursively apply default ACLs of a directory to its descendants?

If I have a directory with default ACL entries assigned to it, but some or all of its descendant files and sub-directories have access or default ACLs that do not agree with those defaults, how do I ...
2
votes
0answers
1k views

Samba 4.1.9 returning “access denied” trying to change share perms from Win client

UPDATE: version mismatch seemed to stop happening for some reason, although not sure why/at what point. Have a "public" (within LAN...like this) read-write share on a CentOS 6.4 box running, ...
2
votes
0answers
2k views

CentOS 6.5 sound permissions

I am trying to configure ALSA for a CentOS 6.5 minimal install, my problem is non-root users do not have permission to access the sound devices in /dev/snd because the files are missing access control ...
2
votes
0answers
265 views

New files getting wrong permissions from setacl

I'm trying to create a file from windows on a mapped samba share, but after creating the file, I'm unable to edit it. For some reason the mask is changing to rw- even though my default is set to rwx. ...
1
vote
0answers
50 views

setfacl fails on files created by Apache

I have a directory owned by my user vagrant. The webserver (and web application) run as www-data. Both users need to create and modify directories and files in this directory, regardless of who ...
1
vote
0answers
21 views

Inheriting permissions with ACLS

I've trying to set up a CVS repository using ACL's (setfacl) and having trouble getting permissions to inherit properly. Namely, when a user commits to the repository, I want the file to inherit the ...
1
vote
0answers
11 views

Example of situation where ACL unaware tools would grant unintended permssions

This document about File ACLs makes mention that the masking mechanism was put in place to solve the problem of ... POSIX.1 applications that are unaware of ACLs will not suddenly and ...
1
vote
0answers
59 views

make ACL to work perfectly

I know there are plenty of questions and answers about ACL and permissions, but to be honest they are so weak to make any coherent understanding! it's just like a mix of unorganized information. Hope ...
1
vote
0answers
62 views

When using linux acl mkdir and mkdir -p do different things

I have a directory bar: # file: bar/ # owner: root # group: root user::rwx user:little-jonny:rwx group::r-x mask::rwx other::r-x default:user::rwx default:user:little-jonny:rwx default:group::r-x ...
1
vote
0answers
88 views

How to set ACL on a USB-device

I'm new to acl's so this is blackmagic to me. But what I have is a camera that I want to talk to. So I got a netbooted debian machine: ulf@term13:~(0)$ lsb_release -a No LSB modules are available. ...
1
vote
0answers
131 views

Is it possible to change file permissions when copying

I have a directory with default ACL permissions that get copied to all files created in that directory, but only if they are created in that directory. Would it be possible to change the permissions ...
1
vote
0answers
32 views

ACL doesn't always get inherited

Solaris platform. why is it that "sometimes" a file copied into a directory that has a default ACL attribute does not inherit that ACL? Other times it does.
1
vote
0answers
54 views

OS X: Apply inheritable ACL permissions to pre-existing subfolders and files

I have a folder with numerous ACL permissions set. Most of these include file_inherit and directory_inherit permissions and therefore should be, and are, automatically propagated to any new sub-...
1
vote
0answers
14 views

How can I cause cvs update to use the destination folder's default posix acl mask?

I have a directory and file with these permissions: # file: blue/ # owner: user-a # group: group-a user::rwx user:user-b:rwx group::rwx mask::rwx other::r-x default:user::rwx default:user:user-b:rwx ...
1
vote
0answers
23 views

Problem using Access control lists for new users, ex ( afolder created in skel directoy have acl set, it should apply to new users)

I have a doubt regarding ACL I want to give permissions to a group using ACL A directory created in SKEL directory needs to have a default ACL set that allows the members of the group “linux” to ...
1
vote
0answers
70 views

Copying files to a directory shared via ACL doesn't get default mask

I'm trying to setup a simple shared directory on an ext4 filesystem for a group of users to work on. Let's say I just need to give all permissions to all users belonging to the group "workgroup" to ...
1
vote
0answers
33 views

What forms of discretionary access control are there?

I know it's kind of an unguided question, but just so I have a broader sense of how things are I was interested in getting a reasonably complete list of discretionary access controls available on Unix ...
1
vote
0answers
1k views

Windows domain account can't create files via samba share, but can do this in linux shell, why?

I'm migrating tomcat server from windows to linux (CentOS 6.3 64bit), and want to use samba to share tomcat directory to technical department staffs (windows domain users) with read+write rights. I'...
0
votes
0answers
41 views

How to Include the Common ACL Rules in a Group ACL in the pfSense Squid Guard Package?

I figured out how to use the GUI to block black listed sites dependent on what time it is, but it's a little verbose for my tastes...is it possible to set a Common ACL and then have the Target ...
0
votes
0answers
41 views

scp file to remote server prevent delete

A team want to implement a crude file dump backup solution to be used by multiple hosts. They have a remote user on the backup server backupusr that they can SSH/SCP with, with SSH keys setup. The ...
0
votes
0answers
57 views

SOLVED - OpenVZ acl support for Samba

Setting up Samba-4.3.5 as AD domain fileserver in OpenVZ container, running in ProxMox (pve-manager/3.4-6/102d4547 running kernel: 2.6.32-39-pve). Hardware node has enabled acl support for /var/lib/vz....
0
votes
0answers
45 views

Samba4 AD privilege problem

I mounted NFS share to debian. Below following fstab record: //192.168.14.24/estimating /srv/samba/WDEstimating cifs credentials=/root/.oakservercredentials,iocharset=utf8,file_mode=0777,dir_mode=...
0
votes
0answers
13 views

Darwin acl_get_file vs acl_get_link_np

On Darwin, there are two related functions - acl_get_file, and acl_get_link_np, which both query ACL information for a file. The difference is that, a) acl_get_link_np won't follow symlinks and, b) ...
0
votes
0answers
21 views

How do I grant write access to an API?

I'm trying to run the SOFA Matlab/Octave API version 1.0.1. Copyright 2013 Acoustics Research Institute. This API implements SOFA version 1.0. I've emailed them and they said "I need to grant write ...
0
votes
0answers
53 views

OpenLDAP - ACL control - Full access to user

I need to create a ACL that give to user a full write to rootdn. I tried that: access to * by dn="cn=replicator,o=rootdomain" write But I get the some message. error 50 "Insufficient ...
0
votes
0answers
254 views

Permission of any file folder set to read only on upload

I have inherited an old CMS system that I have just cleansed from a massive hack attack. I copied all the files and databases, scrapped the old server, cleansed the files via various means, cleansed ...