I created a file /home/andrew/lolka123 and granted read permission to a group named andrew. (user andrew owns the file and also a parent directory) I also added group permission to the parent directory.

Now I want to grant access to this file to user http.

Both users andrew and http are present in group andrew. Now I'm trying to read file from http user but it gives me Permission denied, why?

getfacl /home/andrew/lol123:

# file: home/andrew/lol123
# owner: andrew
# group: andrew

getfacl ~/:

getfacl: Removing leading '/' from absolute path names
# file: home/andrew/
# owner: andrew
# group: andrew


sudo chmod g+rx /home/andrew/ doesn't work. getfacl /home/andrew/ still shows group::--- enter image description here

  • Show output of getenforce please. What OS are you using?
    – mrc02_kr
    Sep 6, 2017 at 13:23
  • I'm using ArchLinux bleeding edge with 4.11.9-1 kernel. getenforce command is not available, and it's not available in any packages from Arch repository. Sep 6, 2017 at 13:25
  • The '+' at the end of the permission string indicates there are additional ACLs. What is the output of getfacl . ? Sep 6, 2017 at 13:40
  • This question is not related to apache, I included getfacl . to the question. Sep 6, 2017 at 13:49
  • 2
    group::--- perms on the directory are going to deny access to anyone in the directory's group (aside from the directory's owner). Sep 6, 2017 at 14:22

1 Answer 1


if as http user, the following command newgrp andrew allows you access the file then the reason will be that a session had not picked up the changes to groups - which usually requires a re-login to take affect.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .