Tagged Questions
3
votes
1answer
57 views
ACL, ls, “permission denied” and a lot of questionmarks
I have two users, Alice and Bob. Bob should be allowed to list, ls, Alice's home directory. Alice also has a file in her home directory that Bob should also be allowed to read.
I run these commands ...
3
votes
2answers
80 views
Using setfacl to allow group members to write to any file in a directory
I'd like to use setfacl so that anyone in group 'app' can edit any file contained within /usr/local/users/app regardless of what the traditional UNIX permissions say. I have two users john and ben. I ...
1
vote
1answer
35 views
Function of owning group versus ACL group permissions
Given the fact that we can give any number of groups rwx via POSIX ACL's is there any special privileges given to the owning group? For example, we can set any number of users with ACL's but only the ...
3
votes
2answers
136 views
How do I create a hierarchy of UNIX groups as below?
I need to create a hierarchy of UNIX groups. Something like below:
A
|\
| \
B c
|\
D e
|\
f g
...where A, B and D are UNIX groups and c,e,f and g are UNIX accounts that are members of those ...
2
votes
2answers
123 views
setfacl incorrectly changes group permissions
To backup the "/home" directory tree of a server, I've created a 'backup' account and used setfacl to make the whole directory readable by it. My cron job runs this command as root each night:
...
3
votes
1answer
95 views
Change who is able to chmod
Is there a way to change who can chmod (change the permissions of) a particular file?
It is only the owner of the file (without sudo-ing it), if my experimentation has been correct?
But what I want ...
1
vote
0answers
513 views
Windows domain account can't create files via samba share, but can do this in linux shell, why?
I'm migrating tomcat server from windows to linux (CentOS 6.3 64bit), and want to use samba to share tomcat directory to technical department staffs (windows domain users) with read+write rights.
...
2
votes
1answer
643 views
How do I make all current and future files in a directory readable by a certain group/user?
I have a "Drop Box" directory for students to submit assignments. Its permissions are set to "drwx-wx---" where all of the students belong to the group. This lets them write to but not read from the ...
1
vote
1answer
81 views
Why are directories created with permissions 2070 and files with 060 in a directory with setgid bit?
I have the following directory:
$ ll -d neptune
drwxrws---+ 5 beamin psych 4096 Mar 7 16:18 neptune
$ getfacl neptune
# file: neptune
# owner: beamin
# group: psych
# flags: -s-
user::rwx
...
2
votes
1answer
70 views
Get rights for specific user on file/dir
I'm searching for a command that essentially would do the following: check which rights a user has on a file/dir (including ACL) and return it.
E.g. say you have the following directory:
-rw-r--r-- ...
5
votes
2answers
652 views
What roles do DAC (file permissions), ACL and MAC (SELinux) play in Linux file security?
I need some clarification/confirmation/elaboration on the different roles DAC, ACL and MAC play in Linux file security.
After some research from the documentation, this is my understanding of the ...
4
votes
1answer
229 views
ACL mask does not work as expected
If I copy a file with a base ACL of:
u::rw-,g::r--,o::r--
into a directory with a default ACL of:
u::rwx,g::r-x,g:users:rwx,m::rwx,o::r-x
I obtain a file with mask of m::r--. I would have ...
2
votes
2answers
501 views
HPUX setacl leaves uid behind
I have a shell script that I execute after uninstalling a web application. The script is meant to clean up permissions that were needed during the execution of the application.
find /opt/path -exec ...
11
votes
7answers
4k views
What to use to backup files, preserving ACLs?
When using the tar utility to store files in backups one loses the extended ACLs.
Is there some commonly used and not hackish solution (like: create a script that will recrate the ACLs from scratch) ...
