Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [acl]

ACL stands for access control list. ACLs extend permissions on files beyond the traditional user-group-others triple.

0
votes
1answer
21 views

NT_STATUS_ACCESS_DENIED listing \* when moving home directories to another location

I have a server and just finished building my raids. One of the partitions is supposed to house my home folders which I then want to share with my windows computers through samba. Before I begin ...
0
votes
0answers
10 views

ACL: Wrong owner & group after mounting

I try mounting the filesystem of our NAS on my Linux machine. I mounted the filesystem from the share with my username: sudo mount -t cifs -o user=username,sec=ntlmv2i //share /run/media/user/...
0
votes
1answer
49 views

Keeping the same user and group on files going forward?

I'd like for the ownership of all the files on my site to stay as follows: sudo chown -R www-data:www-data /var/www/example.com/public_html But I need to change the files with another user, so I did ...
1
vote
1answer
34 views

Can a UBIFS be set as ACL?

Running Debian Buster on Kernel 4.20.17 with systemd 241: +PAM +AUDIT +SELINUX +IMA +APPARMOR +SMACK +SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT +GNUTLS +ACL +XZ +LZ4 +SECCOMP +BLKID +ELFUTILS +KMOD -IDN2 ...
1
vote
0answers
61 views

Does Access Control lists override group or owner permissions?

I came across the following task: Add 3 new users - alice, bob, charles Create a new group - marketing - and add alice, bob and charles to that group Create a directory - /marketing - whose owner ...
-1
votes
1answer
18 views

I am being returned to the user list upon 'successfully' signing in to my user account upon launching CentOS, instead of being sent to a desktop

So I'm in a Linux OS class at the moment. We're playing around with ACLs, users, groups, etc. very rudimentary stuff. I (clearly) messed something up, and I'm not sure what the issue is. Every time I ...
2
votes
0answers
26 views

ACL permissions mysteriously giving execute on group

I did the following and I don't understand the end result: $ mkdir mydir $ setfacl -d -m u::rwX,g::rwX,o::rX,m::rwx mydir $ touch mydir/test.txt $ getfacl mydir/test.txt # file: mydir/test.txt # ...
0
votes
1answer
42 views

What would happen if a file have both regular permissions and ACL permissions?

If a file have a regular permission of read for user John, and also have an ACL permission of write for user John, what would happen in this case: Would the regular permissions only be applied (so ...
0
votes
0answers
23 views

Better use ACL or Capability to let users start a service?

My question is openned to other propositions too. An install sequence puts a binary in the directories (say bin1 in PATH_TO_BIN1). It configures a service in /etc/init.d The service has to be ...
1
vote
0answers
54 views

Do ACL permissions differentiate between UNIX file types?

When setting ACL permissions such as sudo setfacl -Rdm g:shared_group:rwx /mnt/shared_resource do the permissions of shared_group extent to every type of file (directory, symlink, regular file, ...
1
vote
1answer
55 views

Access Control Lists — wrong permission?

Created file1 and gave 000 permission. [root@localhost ~]# ls -ltr file1 ----------. 1 root root 0 Jan 28 08:09 file1 Gave "test" user rw permission using access control lists: setfacl -m u:test:rw ...
2
votes
1answer
64 views

Protect overwriting folder content

Is there a way (with acl's) to protect the contents of a folder? Users should create files inside a folder but not overwrite/edit/delete them. Is this possible?
0
votes
1answer
73 views

Centos 7.5 autofs posix acl support

On centos 7.5 I have mounted NFS share(from isilon server) via autofs service. Now when I run setfacl -d -m g::rwx /path/to/share/location it gives error setfacl: /path/to/share/location Operation ...
0
votes
0answers
25 views

ACL permissions / group not getting permissions

I am trying to get ACL permissions to work the easy way by allowing groups specific access on files and folders. However my system is ignoring group permissions entirely. My setup: Debian 8 user ...
10
votes
1answer
166 views

Why did FreeBSD lose the w mask but Debian retained it?

I am trying to understand the difference in behaviour between FreeBSD ACLs and Linux ACLs. In particular, the inheritance mechanism for the default ACLs. I used the following on both Debian 9.6 and ...
1
vote
1answer
86 views

Why are my new files not getting the group writeable permission?

I would like to set up a directory such that all new files are group writeable, regardless of the umask setting of the individual user. I've created a stor group and added all users to it. Then, I ...
8
votes
1answer
145 views

Why was POSIX.1e withdrawn?

The proposed POSIX.1e standard defines a few things like ACLs that are widely supported. But the proposal itself was withdrawn. How come? The only reasoning I've found online is this quote from ...
1
vote
2answers
477 views

How to remove directory flags on linux?

I have a folder called "post", when I write getfacl post I get these results: # file: post # owner: www-data # group: ftpgroup # flags: -s- user::rwx group::rwx other::r-x default:user::rwx default:...
-2
votes
1answer
54 views

Linux giving permission to an user to the log file

Using SFTP I want to copy the log directory from var. By default my user have permission denied without sudo. Root is blocked for login, besides I don't want to use it in sftp. I want to give my ...
1
vote
1answer
168 views

Permission denied when accessing a file with acls on xfs file system

I'm trying to use ACLs with the xfs file system on Amazon Linux (RHEL-ish distribution). However, when I configure acls and try to access a file with a test user, my access is denied. I currently ...
0
votes
1answer
338 views

Read only access to directory for specific users on AIX box

We are having user1 and user2 in AIX server (7100-04-05) and we need to give readonly access to path /data/web/tmp/* (they need to be able to read contents of files). With AIXC access list we can give ...
3
votes
1answer
820 views

What is the exact purpose of `mask` in file system ACL?

When I apply default ACL in a directory I see default:mask or just mask in the following two scenario. Scenario 1 -bash-4.2$ ls -ld test/ drwxr-x---. 2 test test 4096 Oct 15 19:12 test/ -bash-4.2$...
0
votes
1answer
297 views

How to set permissions for future files?

I freely admit this is homework: Imagine you and your friend host an IT faculty in your former school. The list of attendees is in the attached text file. You need to manage permissions for ...
0
votes
2answers
160 views

setfacl -R doesn't work on Cygwin

I want to change the ACL and the default ACL for all directories and files in a base directory. In other answers (such as this one), the -R flag is used. However, I get $ setfacl -R -m u::rwx my_dir/ ...
0
votes
5answers
205 views

Is a process with effective or real uid being root still subject to permission bits of a file when accessing the file?

From https://security.stackexchange.com/a/67218/ In Unix and Linux there are two levels of permissions: standard user and superuser (usually called root). The standard user has access only to ...
1
vote
1answer
14 views

Setting access control list does not have any effect

I'm trying to set the ACLs for a particular file, but using the options R for recursive d for default m for modify does not seem to have any effect, as indicated below: /home/pkaramol/Desktop/...
0
votes
0answers
64 views

How can I determine the “alternate access control method” when the access flags in ls end with a `+`

On my Ubuntu, the directory in which pluggable media is mounted (/media/me) is owned by root and has access flags drwxr-x---+, so without the "alternate access control method" indicated by the + I ...
2
votes
2answers
202 views

chmod , umask, acl

I think the answer is "That's just how it works," but I figured I'd ask in case I'm doing something wrong. My account's default umask is 0077. I'm in the wheel group. I have a directory with this ...
1
vote
2answers
86 views

How to configure an account to have read permissions to on all files on a system, including root's files?

I need to create a kind of "backup operator" account, which can read all the files on a system for copying to a backup system without the permission to modify any of them, including those belong to ...
2
votes
1answer
491 views

How do hard links, symbolic links, and ACL folder permissions interact?

This one was a bit tricky for me to realize, but I came across a very weird behavior involving ACL extended file permissions and hard/symbolic links. I'll do my best to keep my question short and to ...
1
vote
1answer
1k views

How to change permissions on SAMBA subfolder?

I have a SAMBA server with ROLE_DOMAIN_MEMBER in Active Directory. My main aim is to make a different permissions on share sub-folders on very single share. It can be done using Linux acl or Windows ...
1
vote
0answers
23 views

Network share permissions

I try to reproduce this: 6 users involved: Ann, Betty, Charls, Danny, Edward, Fred 1 share: SHARE 3 folders: Optional, Personal, Questions SHARE (only those 6 can read) |_Optional (only Ann and ...
1
vote
1answer
96 views

How to change ls color for entries with extended ACL?

On my system, directories and files with extended ACL's are printed like this: which is very difficult to read when it's printed in a 10pt font like I like my console. My LS_COLORS variable is ...
3
votes
1answer
67 views

newly created directories should be executable by default

I am using the following steps to set permissions and default acl permissions. chown as required find . -type d -exec chmod 770 {} \; find . -type f -exec chmod 660 {} \; find . -type d -exec chmod g+...
2
votes
1answer
44 views

getfacl says my unprivileged account should be able to read the contents of a dir, but it can't

I'm probably missing something glaringly obvious..... but I can't see it. I have an ordinary directory on FreeBSD, controlled by NFSv4 ACLs. The ACLs say I can list its contents; but I can't. Here's ...
0
votes
1answer
88 views

OpenLdap 2.4 ACL

can you help me with rights for group OpenLdap 2.4? There is my slapd.conf # Allow LDAPv2 client connections. This is NOT the default. allow bind_v2 #Basic rights for authentication access to ...
1
vote
1answer
186 views

ACL inheritance recalculation on FreeBSD - when does it happen and can I force inheritance recalculation rather than set explicit ACLs?

If I'm using NFSv4 ACLs on FreeBSD, and I change the ACLs on a directory in a way that affects the inherited ACLs of its child files+dirs (and potentially might cascade and affect the children/...
1
vote
0answers
31 views

Cannot use ACL to give user write permissions, is ACL enabled?

On a RedHat 6.9 server I have a folder named "/Data", permissions are: drwxrwxr-x 20 root root 4.0K Apr 24 2018 Data I want to add a user via ACL to have write permission on this folder for ...
1
vote
1answer
43 views

Fastest way to locate any files/dirs with different ACLs than parent? (FreeBSD)

As the question says. I have a data pool with ~ 10M files with access controlled by NFSv4 ACLs. It's usable from CLI, Samba, sometimes by daemon processes or rsync, and for some dirs by ftp/sftp, so ...
1
vote
1answer
171 views

how can I get/set ntfs permission from command-line (or script) on linux?

I want to copy my home directory to a new install of the same version of windows. On my new install, my user name will correspond to a new UUID, so I want to edit the permissions to add the a copy of ...
0
votes
1answer
50 views

Add a user to have permission for a particular directory in linux

I'm trying to add a user to have permission to access a particular directory on a linux filesystem. I saw this answer here: https://superuser.com/questions/235297/allow-specific-user-permission-to-...
0
votes
0answers
57 views

How to set ACLs so a user can control any dir content, but not the dir itself and not file permissions?

I'm using FreeBSD and ZFS (I think FreeNAS uses NFSv4 ACLs). I want to grant access to a group of users (group name: publicfiles_rw_users) and allow them to modify, create, and delete all files and ...
2
votes
2answers
52 views

Why can't regular users create and manage user groups?

I've been wondering if there is a good reason why a regular user can't create their own group. It would make sense for the file owner to be able to set up a group and manage file permissions. For ...
1
vote
1answer
150 views

How to stop setfacl from making my directory writable for group?

I have a group called webdev and I want only the root and the memebers of the group webdev to have write access on the directory /web. Now, Here's the problem: # chmod -R u=rwX,go=rX /web # ls -l /...
0
votes
1answer
299 views

Nfs4_setfacl reports error on files of mounted folder

I mounted an nfsv4 folder (both client and server are CentOS 7.4) via command $ sudo mount -t nfs -o v4.0,sec=krb5 ark-centos7-ker.qa.arkivio.com:/export/nfs1 /nfs4-mnt-dir created a file via: ...
1
vote
2answers
413 views

Can't delete and remove SELinux context or ACL from a symlink in /usr/lib under root

I'm on Fedora 27 and experience problems with updating the packages by dnf update. The problem is exactly as described here: https://superuser.com/q/1005740/683161 I tried to delete symlink under /...
2
votes
0answers
286 views

How to get a user's effective permissions (traditional+acl) for a file/dir?

I've looked at other answers but can't find an answer for this. I have a file system which uses ACLs. I want to test what the resulting set of permissions (both traditional and ACLs) will be for a ...
3
votes
0answers
444 views

SSHFS mount option default_permissions does not support ACL's - please explain

In regard to the FUSE GitHub page, I have some questions: Does the quote below mean SSHFS does support ACL's if default_permissions is not used? Does it mean that if one needs ACL support and proper ...
0
votes
2answers
269 views

Do we have log for ACL ..?

I would like to know is there any way to list the ACL of particular user for all files. Example, for cronjob we have details in /var/spool/cron/. In the same way does ACL store the info anywhere?
1
vote
3answers
626 views

why setuid is set instead of giving privileges to others

Assuming the normal user wants to update his password at /etc/passwd. Why it is preferable to set Setuid in a way such as -rws------ . I am assuming it works the same as if the other users will be ...