0

I created a file /home/andrew/lolka123 and granted read permission to a group named andrew. (user andrew owns the file and also a parent directory) I also added group permission to the parent directory.

Now I want to grant access to this file to user http.

Both users andrew and http are present in group andrew. Now I'm trying to read file from http user but it gives me Permission denied, why?

getfacl /home/andrew/lol123:

# file: home/andrew/lol123
# owner: andrew
# group: andrew
user::rw-
group::r--
other::r--

getfacl ~/:

getfacl: Removing leading '/' from absolute path names
# file: home/andrew/
# owner: andrew
# group: andrew
user::rwx
user:nobody:--x
group::---
mask::rwx
other::---

EDIT 2:

sudo chmod g+rx /home/andrew/ doesn't work. getfacl /home/andrew/ still shows group::--- enter image description here

  • Show output of getenforce please. What OS are you using? – mrc02_kr Sep 6 '17 at 13:23
  • I'm using ArchLinux bleeding edge with 4.11.9-1 kernel. getenforce command is not available, and it's not available in any packages from Arch repository. – deathangel908 Sep 6 '17 at 13:25
  • The '+' at the end of the permission string indicates there are additional ACLs. What is the output of getfacl . ? – user4556274 Sep 6 '17 at 13:40
  • This question is not related to apache, I included getfacl . to the question. – deathangel908 Sep 6 '17 at 13:49
  • 2
    group::--- perms on the directory are going to deny access to anyone in the directory's group (aside from the directory's owner). – Mark Plotnick Sep 6 '17 at 14:22
0

if as http user, the following command newgrp andrew allows you access the file then the reason will be that a session had not picked up the changes to groups - which usually requires a re-login to take affect.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.