ACL stands for access control list. ACLs extend permissions on files beyond the traditional user-group-others triple.

learn more… | top users | synonyms

13
votes
7answers
6k views

What to use to backup files, preserving ACLs?

When using the tar utility to store files in backups one loses the extended ACLs. Is there some commonly used and not hackish solution (like: create a script that will recrate the ACLs from scratch) ...
10
votes
2answers
258 views

Is there a Linux deep diff tool that also compares file attributes?

Is there a Linux tool like diff that will recursively compare files and directories, but with the addition of also comparing: extended attributes, acl's, se contexts?
8
votes
1answer
210 views

How are ACL permissions processed and in what order do they apply to a given user action?

CentOS 6.4 I'm trying to better understand how filesystem ACL rules are processed and in what order ACL rules apply. For example, let's say users bob and joe belong to a group called sales. Let's ...
5
votes
2answers
1k views

What roles do DAC (file permissions), ACL and MAC (SELinux) play in Linux file security?

I need some clarification/confirmation/elaboration on the different roles DAC, ACL and MAC play in Linux file security. After some research from the documentation, this is my understanding of the ...
5
votes
1answer
50 views

Setting group permission on directory

I'm looking for the best way to give a group permission to view any files in /var/log, but only using cat or tail. My best guess right now is that I need to use ACL's: setfacl -mR default:g:group:4 ...
5
votes
2answers
420 views

Mercurial (hg) not respecting default ACL settings

I'm trying to set fine grained access control to various mercurial repositories using ACL. When I push changes to repository any new files created under /myrepo/.hg/store/data do not have default ...
4
votes
1answer
927 views

copying device nodes

I'm trying to transfer a working Linux installation to a new larger disk, so I've attached the new disk on a USB port, partitioned it and created filesystems. While copying all the files over I hit a ...
4
votes
1answer
147 views

Can not explain ACL behavior

So this is situation: got server for web-developers. There are many developers. All developers + PHP + Apache belongs to www group. There is a development directory - development. The goal is that ...
4
votes
1answer
329 views

ACL mask does not work as expected

If I copy a file with a base ACL of: u::rw-,g::r--,o::r-- into a directory with a default ACL of: u::rwx,g::r-x,g:users:rwx,m::rwx,o::r-x I obtain a file with mask of m::r--. I would have ...
4
votes
2answers
3k views

Using setfacl to allow group members to write to any file in a directory

I'd like to use setfacl so that anyone in group 'app' can edit any file contained within /usr/local/users/app regardless of what the traditional UNIX permissions say. I have two users john and ben. I ...
4
votes
1answer
867 views

How do I edit a file and preserve its access control list / SELinux security context?

I'm on CentOS 6.2, and have a file with the alternate access method character displayed as a dot. ls -l myfile -rwxr-x---. 1 me mygroup 172 Aug 13 10:03 myfile ^ This dot. ...
4
votes
1answer
350 views

Using ACL's over read only/remote filesystem

I would like to define local ACL's to be used over a remotely mounted filesystem. The filesystem is mounted via autofs and sshfs FUSE. The idea is that we could setup a jailed user on a jump server ...
3
votes
1answer
816 views

ACL, ls, “permission denied” and a lot of questionmarks

I have two users, Alice and Bob. Bob should be allowed to list, ls, Alice's home directory. Alice also has a file in her home directory that Bob should also be allowed to read. I run these commands ...
3
votes
2answers
507 views

How do I create a hierarchy of UNIX groups as below?

I need to create a hierarchy of UNIX groups. Something like below: A |\ | \ B c |\ D e |\ f g ...where A, B and D are UNIX groups and c,e,f and g are UNIX accounts that are members of those ...
3
votes
2answers
142 views

Permissions by path instead of file mode bits

I often find that the unix way of handling file permissions is powerful, particularly when combined with ACLs, but rather difficult to handle. Setting file modes, group ownership and extended ...
3
votes
2answers
80 views

Why don't I have read access to files with modified ACL?

My aim is to allow read access to folder /var/www/mysite/ only for users in group www-data using a default ACL. This works for a regular ACL, but not for a default ACL. Why? This is how I did it: I ...
3
votes
1answer
83 views

Richacl invalid argument when trying to set atributes

I've compiled a kernel to use richacls, and compiled the richacl's utility, (but not the e2fsprogs). I've mounted a loop file with richacl flags /root/fs_prueba_10mb on /media/ext4_con_richacl type ...
3
votes
1answer
136 views

Change who is able to chmod

Is there a way to change who can chmod (change the permissions of) a particular file? It is only the owner of the file (without sudo-ing it), if my experimentation has been correct? But what I want ...
3
votes
1answer
1k views

How do I make all current and future files in a directory readable by a certain group/user?

I have a "Drop Box" directory for students to submit assignments. Its permissions are set to "drwx-wx---" where all of the students belong to the group. This lets them write to but not read from the ...
3
votes
0answers
36 views

setting default umask and user:group on directory

I have a directory data and I need to set default umask and ownership for all directories/files (both existing and future files). I want all files in data to have ownership root:martin ans ...
3
votes
0answers
14 views

acl not overriding unix rights?

I have a folder with UNIX rights that forbid access to me : ls -l Sources-labo drwxrwxrw-+ 6 nobody applications 73728 févr. 25 13:25 Sources-labo groups users vault but the ACL are set so that ...
3
votes
1answer
418 views

Using setfacl to create recursive permissions for Apache with rsync

I have a Dokuwiki installation locally, which I regularly sync to my server with rsync. I'm also going to give a friend of mine an ssh account, and host his public Dokuwiki installation. However, I'm ...
3
votes
0answers
475 views

“Operation not supported” for setfacl inside a python script [closed]

I've programmed a script using python which logs in as root on the host machine and executes some commands. Therefore it uses ssh. I want to setup acl. If I do following commands in the command line, ...
2
votes
2answers
42 views

How to determine if NFS mount is mounted as v3 or v4?

Red Hat 5/6 when I do mount it says type nfs, I would like to know how to determine version if it isn't listed in mount options or fstab. Please don't say remount it with the version option, I want ...
2
votes
2answers
190 views

Giving www-data permision to Dropbox subfolder?

I want to give my website the permission to read files & folders from a Dropbox subfolder. I think I have added the correct permissions, but I can't get the www-data user to get access to the ...
2
votes
2answers
24 views

Specialized access control for directories in RedHat

I have a requirement where I want to change permissions for a directory so that the directory owner (user/group) would be able to create files inside the directory and modify them, but won't be able ...
2
votes
3answers
222 views

Where is ACL data technically stored?

I'm studying ACLs and am confused on where this information technically resides. Is this just technically just meta data from inodes?
2
votes
2answers
587 views

HPUX setacl leaves uid behind

I have a shell script that I execute after uninstalling a web application. The script is meant to clean up permissions that were needed during the execution of the application. find /opt/path -exec ...
2
votes
3answers
160 views

User with read access to /home

Pardon my ignorance but I can't seem to come up with a solution to this one. I'd like to create a user that has read access to every user's home catalog located in /home. Do I need acl's for this or ...
2
votes
1answer
459 views

OpenLDAP Centos 6

I am trying to set up some ACLs (starting off with a simple userpassword ACL) on a new OpenLdap deployment. I am trying to get to grips with the new conf.d configuration format - but am struggling. ...
2
votes
1answer
22 views

setfacl default --x on directories and r— on files for user

Having the following directory structure [sr@server directory]$ tree . ├── folder1 │   ├── fileA │   └── fileB └── folder2 └── fileC 2 directories, 3 files I want to set a default facl on ...
2
votes
1answer
894 views

How does umask affect ACLs?

Can someone explain to me how umask affects the default mask of newly created files if ACLs are activated? Is there some documentation about this? Example: $ mkdir test_dir && cd test_dir $ ...
2
votes
3answers
249 views

'setfacl' permissions don't apply to directories created by git clone?

Here's how I am setting permissions for my website's root directory i.e. ~/public_html, where the files that my website serves are placed: sudo chgrp -R www-data ~/public_html chmod g+s ~/public_html ...
2
votes
2answers
478 views

setfacl incorrectly changes group permissions

To backup the "/home" directory tree of a server, I've created a 'backup' account and used setfacl to make the whole directory readable by it. My cron job runs this command as root each night: ...
2
votes
2answers
20 views

How to manage authentication with multiple VPS's and GoogleApps?

I have a bunch of VPS's and every now and then I have to create another. Currently I use AWS, Rackspace and DigitalOcean as my IAAS providers. Most of them are Ubuntu-based. Besides, I have the users ...
2
votes
2answers
491 views

ACL defaults not being obeyed on copy over NFS

I have an Arch Linux box that has a folder from an Ubuntu server mounted via NFS. I've set up an Access Control List on the folder on the server such that any new files should have their permissions ...
2
votes
1answer
635 views

How to use Extended ACL's on AIX?

Using AIX (6.1) FTPD, a user needs to log in and it should only reach 2 directories (read/write) in the system, ex.: /foo/sth1 and /foo2/sth2 Besised the users home directory it shouldn't reach ...
2
votes
1answer
80 views

Get rights for specific user on file/dir

I'm searching for a command that essentially would do the following: check which rights a user has on a file/dir (including ACL) and return it. E.g. say you have the following directory: -rw-r--r-- ...
2
votes
0answers
37 views

Using FACLs to restrict default group but allow others

So, I'm running RHEL 6.x with acls enabled, etc. and I've been fighting this ACL issue for a bit now and I can't seem to get it down. I'm trying to make it so that: /var/www/html/* are owned ...
2
votes
2answers
275 views

Chroot SFTP users who require access to multiple directories under same parent folder

I have a RHEL 6 server with a /Documents directory, and it has child directories 1 2 3 4 5.... right under the /Documents directory. Is it possible to create an SFTP chroot jail that only gives a ...
2
votes
0answers
376 views

CentOS 6.5 sound permissions

I am trying to configure ALSA for a CentOS 6.5 minimal install, my problem is non-root users do not have permission to access the sound devices in /dev/snd because the files are missing access control ...
2
votes
0answers
103 views

New files getting wrong permissions from setacl

I'm trying to create a file from windows on a mapped samba share, but after creating the file, I'm unable to edit it. For some reason the mask is changing to rw- even though my default is set to rwx. ...
2
votes
1answer
53 views

Copying a file on a JFS filesystem, does not follow ACL guidelines

I have a JFS filesystem /dev/md2 on /mnt/hd2 type jfs (rw) to which I'm trying to copy some folders into target folder /mnt/hd2/videos/movies/. NOTE: I'm actually not using this target folder ...
2
votes
1answer
213 views

Chown and the risk of corrupting the backup disk

I am about to modify the file ownership recursively in a filesystem that uses ACLs. Because it is my backup disk, I thought I'd solicit comments on the script before I run it. #!/bin/bash # Replace ...
1
vote
2answers
51 views

UNIX ACL disadvantages [on hold]

I have read a lot about how great UNIX ACLs are. For example, one good example can be viewed here. However, are there any disadvantages or configurations that cannot be expressed using ACL?
1
vote
3answers
3k views

Howto set access control lists ACLs in OpenLDAP

I'm using the Debian Squeeze OpenLDAP. Where can I set ACLs? Isn't it possible to execute the access to directives with ldapmodify? There's no slapd.conf file in Debian, they use a slapd.d folder
1
vote
2answers
1k views

exim4 on debian: why does this ACL work when testing with -bh but not in actual use?

I've got local_acl_check_data to reject the typical spammer tactic of using the same address as From: and To:, but since some less-spammy sources, such as Yahoo Groups, do this, I'm using a whitelist ...
1
vote
3answers
213 views

Setting default username and group for files in directory

Using this helpful post I am able to set a default group and file permissions in a folder. I'm having trouble setting a default owner (teamlead uid 1234). setfacl -d -m g::rwx /my/test/folder ...
1
vote
2answers
106 views

How to give permissions to user (regarding an NFS share)

There are two machines: "A" and "B". OS is SLES 9.4. "A" is the NFS server, "B" is the NFS client. "A" has exported an FS to "B". "B" mounted the NFS share. On both machines I have root permission. ...
1
vote
1answer
35 views

Why can't ACLs block users from having access to their own home directory?

CentOS 6.x In the process of studying ACLs, I came across this blurb in my training documentation: However with ACLs, you can't deny access for a user to his home directory While I can't think ...