Questions tagged [acl]

ACL stands for access control list. ACLs extend permissions on files beyond the traditional user-group-others triple.

Filter by
Sorted by
Tagged with
0 votes
0 answers
37 views

Can't access file even though I am the user, I have permissions, I have chowned/chmod'd the entire directory structure, selinux off

Sorry for the copy/paste, doing this over a remote screen share: I am on Rocky Linux and I am at a total loss as to what is going on here. I can't cat/vim this file but as you can see, I am the owner,...
Grant Curell's user avatar
0 votes
1 answer
39 views

linux ls -l ACL +, . , gap How to make gap

drwxr-xr-x+ 4 root root 4096 Sep 21 04:00 test << + drwxrwxrwt. 10 root root 250 Sep 21 04:03 tmp drwxr-xr-x. 12 root root 144 Sep 19 03:42 usr << . drwxr-xr-x. 20 root ...
박용원's user avatar
0 votes
1 answer
26 views

Samba ACLs prevent "full control"

I have setup a Samba file server as a Active Directory member. The file server works fine and users can access a share, create files and folders, delete and modify them etc. Now consider the following ...
T. Pluess's user avatar
  • 490
0 votes
0 answers
28 views

ACL implementation using setuid

I am working on an assignment that mainly deals with the following topic: The main idea is to run a program as fakeroot that elevates the privileges of one user to read the file of the owner. If ...
lamdeb's user avatar
  • 1
0 votes
0 answers
39 views

Is there an equivalent to /etc/permissions with support for ACL?

I need to define a list of rights with standard UNIX and some with ACL rights. Is there a way to do check that with a config file like /etc/permissions does for UNIX rights? It is a file that is ...
Pascal P.'s user avatar
0 votes
1 answer
45 views

Do ACLs always override default chmod permissions? [duplicate]

What if I have a file on a Linux machine with user permissions of rw but assigned that user rwx permissions via ACL? Will the ACL override that default user permissions and allow execute access? nick@...
Nick Kiermaier's user avatar
4 votes
0 answers
70 views

Cygwin inheritance of Windows's security for cross-account file creation/modificaton?

On a Windows 10 laptop, I have an administrator account Admin, a non-administrator account User.Name, and the default Public account. From either Admin or User.Name accounts, files created in the ~/ ...
user2153235's user avatar
0 votes
1 answer
16 views

How can I give another user read/write access to a specific sub folder and the ability to ls the tree but only for the folder they have access to?

I have a user user1 that has a bunch of folders in their home directory, including /home/user1/data/special/files. I have another user user2. I want: user2 to be able to read/write files/folders in /...
IMTheNachoMan's user avatar
2 votes
2 answers
181 views

Not able to give write permission to other user with ACL or chmod

Anyone know why rocky can't write to /tmp/afile? Giving rocky permission as an other user with chmod o+w doesn't seem to work either 🤔 I updated the acl with: setfacl -m u:rocky:rw /tmp/afile id as ...
Newbie's user avatar
  • 23
1 vote
2 answers
33 views

ACL not applying default group

I want all new files / folders in the directory /var/www/company and all its subdirectories, to have user company and group www-data. So I've setup my ACL like this: $ getfacl /var/www/company/ ...
Black's user avatar
  • 1,999
1 vote
1 answer
55 views

Override 700 permissions so it became group-readable or at least accessible for given user but the owner?

Given that an app is writing files with 700 permissions, which means they are not readable by the group, I need these files to be readable by a special backup user account. ACL seems to be completely ...
Mikhail Karakulov's user avatar
1 vote
1 answer
16 views

Why does setfacl affect filemode by turning on group-write

I have a script that is used to re-apply ACLs on files and directories. However it has the side effect of turning on Group Write permissions that I can not explain. I have narrowed down the cause to ...
VagrantPaladin's user avatar
0 votes
2 answers
101 views

Why is an open inode system call a security risk?

According to the accepted answer here, it is simply because you would not make the access checks at the directories leading up to that file. For example, with a call to openinode(inode #, flags). My ...
user129393192's user avatar
1 vote
1 answer
45 views

How do I replace NFS4 ACL A::EVERYONE@:rxtncy with deny everyone who is not in my specified groups?

I have been asked to write ACEs such that only the owner and specific groups can access a directory. nfs4_getfacl shows A::EVERYONE@:rxtncy is in the ACL. I tried setting D::EVERYONE@:RWX but that ...
user189395's user avatar
1 vote
1 answer
162 views

How to setfacl on a directory and all its parents?

Let's say we have the following directory structure a b1 c1 c2 b2 c3 c4 And I want to use setfacl to give a user frank access to c1, I can do something like setfacl -m u:frank:rX ...
DrizzleX's user avatar
  • 125
0 votes
1 answer
566 views

Set default permissions for files received via SFTP

I'm receiving files pushed from another system via SFTP to a directory on a Linux VM. These files get the wrong permissions u=rw g= o=. However I need those files to have permissions like u=rw g=rw o=....
Niklas Letz's user avatar
0 votes
1 answer
38 views

User cannot write to directory after granting permission with setfacl

EDIT: I forgot to add /mnt/storage has been mounted using mergerfs (pooling 2 drives which are formatted as ext4) I am running Lubuntu 22.04.2 and have run the following commands (note the user radarr ...
ali's user avatar
  • 1
0 votes
1 answer
337 views

Convert Inherited Permissions into Explicit Permissions from Command-line

I have a CIFS/SAMBA network share called Public_Share on TrueNAS Scale (Debian based) and it's an shared area where everyone on my local network has full access to be able to drop files and folders. ...
willowen100's user avatar
0 votes
0 answers
80 views

User has access to directory But not able to list files inside it

The user has access to the directory But the user is NOT able list files or go inside that directory. output of getfacl: getfacl: data/emp/social/AUTO123/ user::rwx user:spidy:r-x user:lisa:rwx group::...
user avatar
1 vote
1 answer
35 views

ACL - remove any implicit permissions

How to remove all implicit permissions for a group for a directory? Lets say for a group named "A" we have specified permissions now if I remove a user from group "A", will this ...
tanmay196's user avatar
0 votes
0 answers
86 views

rsync implications of ACL backups between different source & dest file systems

I'm having an issue using rsyncd (the daemon-ized version of rsync) to back up files from my macOS to my Synology server. Here's the command that fails: % rsync -rlcAXtgoDiv --fake-super ~/scripts ...
Seamus's user avatar
  • 2,583
0 votes
1 answer
31 views

Shared /opt between distros

I have currently sat opp a Workstation where I'm using the filesystem /opt/vm to store my various virtual machines, nothing else, no binaries or config files. This filesystem is mounted to a dedicated ...
de-diac's user avatar
  • 103
0 votes
0 answers
26 views

Access rights through group which limits modifying/deleting others files

(I previously posted this on superuser, but thinks this question is a better fit for this stackexchange...) Let's say I have a directory some_dir, and a group some_group with a number of users. I ...
Bart's user avatar
  • 900
0 votes
1 answer
194 views

A little difficult: how to replicate the posix acl default on zfs/nfsv4 acl?

Suppose I want a dir, which all files and directories created inside has the group permission of the group owner of the dir, and 770 as default permission. With posix ACL is really easy #create a dir.....
elbarna's user avatar
  • 12.1k
0 votes
1 answer
148 views

Is it possible to revoke delete permissions with Linux permissions or ACL's?

If i wanted to create a directory that is owned by a user don and the group owner was a group called bob, would there be any way to: Allow the group (bob) to have permissions to create and write to ...
zeek's user avatar
  • 1
0 votes
0 answers
41 views

macOS ACL settings - unable to delete Time Machine backup left-over files

(macOS Ventura - MacBook Pro M1) I have deleted Time Machine backup file manually!! (my bad). Now I am left with files in my .Trashes folder that I cannot delete, no matter what I try. I have enabled ...
cem ozel's user avatar
0 votes
0 answers
36 views

Creating a shared directory with default group and default permissions

Problem I want to create a shared directory, where users of a specific group can copy files to. If they do, the files should belong to and be readable by all other members of the same group. Others ...
Mike D's user avatar
  • 1
0 votes
0 answers
24 views

Why is ACL default:other field showing a different value from Linux's own 'other' field?

So I have set a default ACL on a folder so that: # file: Accounting/ # owner: ivan # group: accounting # flags: --t user::rwx group::r-x other::--- default:user::rwx default:group::r-x default:group:...
user1143191's user avatar
0 votes
0 answers
113 views

Ubuntu 22.04 - URL Filter / ACL / Block websites

I configured my Raspberry Pi with Ubuntu 22.04 image as a WiFi router. Is there a possibility that I can block certain websites like YouTube and Facebook for all users who are logged into my raspberry ...
user556667's user avatar
0 votes
0 answers
62 views

Set FACL on subdirectories and files only not on parent directory

Consider a basic directory tree with and several hundred subdirectories: /basedir/ /basedir/subdir1/ /basedir/subdir2/ ... /basedir/subdirn/ etc. I wish to set an FACL recursively against all ...
shocko's user avatar
  • 49
1 vote
1 answer
225 views

Unable to delete root-owned file under /tmp

The file and folder are owned by root but I did sudo chmod ugo+rw on both, which I confirmed with ls -l. Still, I cannot remove the file as normal user. ❯ ls -ld /tmp /tmp/perm drwxrwxrwt 46 root root ...
xeruf's user avatar
  • 501
0 votes
0 answers
57 views

Restrict access to web directory using acl

The requirement is to allow a specific user (e.g. someuser) full access to a directory (e.g. /var/www/html/someproject) via SSH/SFTP, but not allow browsing anywhere else. Is it possible using only ...
Arn's user avatar
  • 1
0 votes
0 answers
22 views

Share everything between the home directory of two accounts [duplicate]

I have two accounts on my Kubuntu distribution, say A and B, and I want that all folders and files that user A creates in its home directory be accessible and modifiable to user B and vice versa. I ...
Ícaro Lorran's user avatar
2 votes
1 answer
179 views

touch/mkdir seems to ignore default ACL

I am pretty sure it is a stupid mistake but I can't seem to figure it out by myself, so please have a look. I set up an ACL for the current folder like so: zigbee2mqtt@nuc:/tmp/folder$ getfacl . # ...
milkpirate's user avatar
2 votes
1 answer
214 views

setfacl -m doesn't add permission to that of the traditional file permissions?

There is a directory /test/test2/. Its owner is root and the group is test and the permission is drwxr-xr-x. I executed setfacl -m group:test:w ./ in that directory. Now, as the user test whose groups ...
Damn Vegetables's user avatar
0 votes
0 answers
109 views

Squid proxy - route request on same local address it was received on

I have a /64 ipv6 block assigned to my server on a single interface and I would like to setup a squid proxy so that a request sent to squid on IP :0001 will be sent on :0001, a request received on :...
James Wang's user avatar
4 votes
1 answer
710 views

Set Default ACL rwx to a directory, can't create a sub-directory as the user

As root, I created /test and set the default ACL with setfacl -m -d dog:rwx /test I verified the output of getfacl # file: test # owner: root # group: root user::rwx group::r-x other::r-x default:...
Damn Vegetables's user avatar
0 votes
1 answer
51 views

Why shouldn't a user cd to a directory using absolute path without rx to all its ancestors?

On Windows, it seems that if the user has read/write permission to the lev5 directory, but no permission at all for all its ancestors, cd c:\lev1\lev2\lev3\lev4\lev5 still works. On Linux, even if I ...
Damn Vegetables's user avatar
0 votes
0 answers
328 views

Read access for Nginx, write access for developers

What are the best-practice permissions one should set in this scenario? The document root is owned by the PHP-FPM user ("website user") who needs to be able to read and write folders+files ...
bobsoap's user avatar
  • 111
1 vote
0 answers
276 views

Setting ACL recursive execute permission on a folder makes files executable

Running Ubuntu 20.04 LTS running Nginx 1.18.0 and PHP-FPM to serve a website. I create a new folder as document root in /var/www, owned by the the FPM user foo, that will host a site: $ sudo mkdir foo ...
bobsoap's user avatar
  • 111
0 votes
1 answer
79 views

Accessing a file in another users home directory using setfacl

I was trying to access a file on another users home directory using acl. I have tried to do it the following way. User k9 made a file test.file and ran setfacl -m u:sai:rwx test.file. Following is ...
gst1502's user avatar
  • 101
1 vote
0 answers
214 views

NFSv4 ACLs on ZFS and other permissions

All, I've been experimenting with using NFSv4 ACLs on ZFS datasets to set default permissions in a handful of directories that are accessed using a few different means (eg. SFTP, NFS, etc.) I've been ...
Steven Stallion's user avatar
0 votes
0 answers
24 views

Complete Linux Folder Separation

Hello fellow Linux users. I'm running Debian 11. I am running an nginx web server with multiple sites. Each site's root directory is owned by a particular user. My goal is to completely make one user'...
pkSML's user avatar
  • 155
1 vote
1 answer
154 views

SETUID not effective when calling cat from AWK script from C program

Consider the following simplified example which illustrates my problem. The server's OS is Debian 11 armhf. we're in directory /botm/test/: drwx------ 2 b b 4096 Sep 27 19:27 hide -rwsr-xr-x 1 b b ...
bicyclesonthemoon's user avatar
2 votes
0 answers
1k views

rsync: opendir failed: Permission denied (13) from a Synology DSM7 server with synoacl

I have rsyncd running as SynoRsyncd sharing the /volume1 module : [user@rsyncServer ~] $ ps -O user:20 -C rsync PID USER S TTY TIME COMMAND 14290 SynoRsyncd S ? ...
SebMa's user avatar
  • 1,991
0 votes
1 answer
294 views

Does the rsync "-a" option exclude the "-A" and "-X" option?

Rsync describes the -a or --archive mode as being equivalent to the options.-rlptgoD (no -H,-A,-X). The -A and -X options are ambiguous and iit is not clear whether they are included or excluded. -A ...
vfclists's user avatar
  • 7,235
0 votes
1 answer
479 views

Issue with file ACLs for /var/log/audit/audit.log

I have a service account that requires access to /var/log/audit/audit.log and since this user shouldn't be part of the root group nor do I want to change the ownership or group of the file, I decided ...
AnthonyBB's user avatar
  • 351
4 votes
1 answer
465 views

Why a file copied with cp not have permissions set according to default ACLs?

Question similar to Why does cp not respect ACLs? on ServerFault but different in one thing: I have set the default permissions of the new files created in the folder /home/myuser and subfolders: ...
Mario Palumbo's user avatar
0 votes
1 answer
36 views

Docker Squid not enforcing time acl in configuration

I have a squid running in docker, which is not enforcing the time ACLs that are defined in the configuration. I'me using https://hub.docker.com/r/ubuntu/squid running on arm This is my configuration ...
BANJOSA's user avatar
  • 711
0 votes
1 answer
87 views

How to protect removal of a subfolder (namely .git folder) via ACL?

I've a quite big archive of git repositories in my development path, and many of them contains branches or stashes that I may have not published around. However I want to be sure that for no reason I ...
Treviño's user avatar
  • 182

1
2 3 4 5
9