Unix & Linux

Questions tagged [acl]

Ask Question

ACL stands for access control list. ACLs extend permissions on files beyond the traditional user-group-others triple.

308 questions
Newest
Active
Bountied
Unanswered
Filter by
Sorted by
Tagged with
0
votes
0answers
40 views

How list users / groups having access to a Linux server that is connected to AD using sssd

Is there a command to get the list of AD Users (or) AD groups, that can access a Linux server, from the command prompt on the server itself without logging into the windows server? Below is how our ...
1
vote
1answer
30 views

How can an owner / ACL change with su / sudo be refused because of missing privileges?

I've got a file owned by root, which must get write access for normal users (particularly user pi): pi@autoradio:/import/valen/autoradio $ ls -al autoradio.db -rw-r--r-- 1 root root 2887050 Nov 12 ...
1
vote
0answers
52 views

Cannot cd to directory even with `rws` group permissions

Me and a teammate both have access to a server. We are both in a group that I will call team. I created a directory on the server, and with how the system is configured it defaults to drwxrws---+ with ...
0
votes
0answers
16 views

How to fix the mask value in acl?

I have set the mask value to r-- (group class). When I added a group with rw- using setfacl (setfacl -m g:test:rw- time.txt). I noticed mask value is changed to rwx. I thought mask value is the upper ...
0
votes
0answers
39 views

How to get acl of the target without getfacl command?

Is there any way to find acl for a given target without getfacl command. How getfacl works, will it reads a system file or it will just issue a system signal to find acl for a given target?
0
votes
1answer
10 views

Modified mask/effective doesn't apply when creating files over ssh/sshfs vs. on machine itself (same user)

I set up mask like setfacl -R -d -m m::rw ., and it works fine on the local machine (that I am ssh'd in right now, its headless). I can have two users modify and read the directory. But when I am ...
0
votes
0answers
187 views

How do I use firewall-cmd to block all outbound connections but exclude an IP number and also allow all inbound connections?

I have 1 server using CentOS7: Local subnet: 192.168.10.10/24 => interface eth0 WAN subnet: 123.456.879/22 => interface eth1 I want to use firewall-cmd to block all outbound connections from ...
0
votes
1answer
473 views

How do I use rsync to reliably transfer permissions & ACLs when copying from NTFS internal C: to NTFS External disk?

What options of Rsync can I reliably use/ how/ combine to either: RELIABLY TRANSFER "working" even if "limited set" of Permissions/ ACLs reliably & without conflict between the Gray area of ...
0
votes
0answers
52 views

Linux groups lose write permission on new directories (NFS)

I have an NFS server with many individual users, and each user has exclusive write access to their personal directory. Some users want to have spaces where their teams can write in directories, ...
1
vote
1answer
42 views

Opening a file *with partially unknown filename* in executable directory

I have a directory in linux which I can eXecute. Thus, I should be allowed to cd into the directory and open the file(s). I know that the file I am interested in starts with f and has a number ...
0
votes
1answer
24 views

Share access between users

I need to give a user access to an other directory (that is not owned by him). e.g. User sam with home /home/sam needs to access /var/www/html. I see multiple ways of doing this. match the rights ...
0
votes
0answers
19 views

UNIX: ACLs automatically on newly created files/folders inside the directory

Is there any wayout, wherein the parent folder ACLs would automatically be replicated to any folder/files created inside the directory in UNIX. eg. /user/active having below ACL # file: active # ...
1
vote
2answers
160 views

Why is NFSv4 not translating POSIX ACL's in a usable way?

I have an XFS filesystem in which some folders (using mode setting) have no public accessiblity, with group owner having read-only privileges. There is a program (which runs as user cryosparc_user) ...
0
votes
0answers
38 views

ACLs on NFS mounted directory

I'm trying to set an acl on the contents of a directory so all members of a group called prod_grp can write to a directory that is NFS mounted from another server. The acl is below: # file: prod-...
0
votes
0answers
17 views

SETFACL to not go out of /home

So I've been testing ACL's in Linux and they work as intended. I have, for example, this folder where I've stablished permissions for users belonging to the gruop share. So far, so good... lucas@...
3
votes
1answer
227 views

Linux File / Folder permissions

I have multiple folders that need to be accessed by multiple users. Specifically, Medusa(Which I use to track which episodes of TV Shows I do not have backed up yet), Plex(Which I use to stream my ...
2
votes
0answers
103 views

User can cd but can't ls directory [duplicate]

This directory had ACL and UNIX permissions set on it. I've reset the directory's UNIX and ACL to the minimum, but the user cannot list the contents. Other users with similar group memberships CAN ...
0
votes
0answers
25 views

ACL vs Groups, Which one is better? [duplicate]

i recently heard about ACL in Linux, and read that we can allow permissions to specific users using ACL. But my question is we can do the same using the groups then why do we use ACL or is it me who ...
0
votes
1answer
95 views

How do I set ACLs for a directory so that a particular user has rwx access for the directory and all children?

Note: to clarify the question, I am assuming an empty directory to start; I realize if it was non-empty I could use the -R option to setfacl. Here's what I tried (wanting to give access of /tmp/...
0
votes
0answers
24 views

Hide folder that user uses currently

I'm searching for a ftp server or any idea to achieve hiding folder from others when somebody is working in it. For example: I have 3 folders: A B C when I working in A, anybody who is also connected ...
0
votes
1answer
162 views

NT_STATUS_ACCESS_DENIED listing \* when moving home directories to another location

I have a server and just finished building my raids. One of the partitions is supposed to house my home folders which I then want to share with my windows computers through samba. Before I begin ...
0
votes
0answers
22 views

ACL: Wrong owner & group after mounting

I try mounting the filesystem of our NAS on my Linux machine. I mounted the filesystem from the share with my username: sudo mount -t cifs -o user=username,sec=ntlmv2i //share /run/media/user/...
0
votes
1answer
63 views

Keeping the same user and group on files going forward?

I'd like for the ownership of all the files on my site to stay as follows: sudo chown -R www-data:www-data /var/www/example.com/public_html But I need to change the files with another user, so I did ...
1
vote
1answer
110 views

Can a UBIFS be set as ACL?

Running Debian Buster on Kernel 4.20.17 with systemd 241: +PAM +AUDIT +SELINUX +IMA +APPARMOR +SMACK +SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT +GNUTLS +ACL +XZ +LZ4 +SECCOMP +BLKID +ELFUTILS +KMOD -IDN2 ...
1
vote
0answers
129 views

Does Access Control lists override group or owner permissions?

I came across the following task: Add 3 new users - alice, bob, charles Create a new group - marketing - and add alice, bob and charles to that group Create a directory - /marketing - whose owner ...
-1
votes
1answer
19 views

I am being returned to the user list upon 'successfully' signing in to my user account upon launching CentOS, instead of being sent to a desktop

So I'm in a Linux OS class at the moment. We're playing around with ACLs, users, groups, etc. very rudimentary stuff. I (clearly) messed something up, and I'm not sure what the issue is. Every time I ...
2
votes
0answers
84 views

ACL permissions mysteriously giving execute on group

I did the following and I don't understand the end result: $ mkdir mydir $ setfacl -d -m u::rwX,g::rwX,o::rX,m::rwx mydir $ touch mydir/test.txt $ getfacl mydir/test.txt # file: mydir/test.txt # ...
0
votes
1answer
47 views

What would happen if a file have both regular permissions and ACL permissions?

If a file have a regular permission of read for user John, and also have an ACL permission of write for user John, what would happen in this case: Would the regular permissions only be applied (so ...
0
votes
0answers
37 views

Better use ACL or Capability to let users start a service?

My question is openned to other propositions too. An install sequence puts a binary in the directories (say bin1 in PATH_TO_BIN1). It configures a service in /etc/init.d The service has to be ...
1
vote
0answers
83 views

Do ACL permissions differentiate between UNIX file types?

When setting ACL permissions such as sudo setfacl -Rdm g:shared_group:rwx /mnt/shared_resource do the permissions of shared_group extent to every type of file (directory, symlink, regular file, ...
1
vote
1answer
125 views

Access Control Lists — wrong permission?

Created file1 and gave 000 permission. [root@localhost ~]# ls -ltr file1 ----------. 1 root root 0 Jan 28 08:09 file1 Gave "test" user rw permission using access control lists: setfacl -m u:test:rw ...
2
votes
1answer
114 views

Protect overwriting folder content

Is there a way (with acl's) to protect the contents of a folder? Users should create files inside a folder but not overwrite/edit/delete them. Is this possible?
0
votes
1answer
149 views

Centos 7.5 autofs posix acl support

On centos 7.5 I have mounted NFS share(from isilon server) via autofs service. Now when I run setfacl -d -m g::rwx /path/to/share/location it gives error setfacl: /path/to/share/location Operation ...
10
votes
1answer
195 views

Why did FreeBSD lose the w mask but Debian retained it?

I am trying to understand the difference in behaviour between FreeBSD ACLs and Linux ACLs. In particular, the inheritance mechanism for the default ACLs. I used the following on both Debian 9.6 and ...
1
vote
1answer
126 views

Why are my new files not getting the group writeable permission?

I would like to set up a directory such that all new files are group writeable, regardless of the umask setting of the individual user. I've created a stor group and added all users to it. Then, I ...
8
votes
1answer
293 views

Why was POSIX.1e withdrawn?

The proposed POSIX.1e standard defines a few things like ACLs that are widely supported. But the proposal itself was withdrawn. How come? The only reasoning I've found online is this quote from ...
1
vote
2answers
1k views

How to remove directory flags on linux?

I have a folder called "post", when I write getfacl post I get these results: # file: post # owner: www-data # group: ftpgroup # flags: -s- user::rwx group::rwx other::r-x default:user::rwx default:...
-2
votes
1answer
562 views

Linux giving permission to an user to the log file

Using SFTP I want to copy the log directory from var. By default my user have permission denied without sudo. Root is blocked for login, besides I don't want to use it in sftp. I want to give my ...
1
vote
1answer
510 views

Permission denied when accessing a file with acls on xfs file system

I'm trying to use ACLs with the xfs file system on Amazon Linux (RHEL-ish distribution). However, when I configure acls and try to access a file with a test user, my access is denied. I currently ...
0
votes
1answer
602 views

Read only access to directory for specific users on AIX box

We are having user1 and user2 in AIX server (7100-04-05) and we need to give readonly access to path /data/web/tmp/* (they need to be able to read contents of files). With AIXC access list we can give ...
4
votes
1answer
2k views

What is the exact purpose of `mask` in file system ACL?

When I apply default ACL in a directory I see default:mask or just mask in the following two scenario. Scenario 1 -bash-4.2$ ls -ld test/ drwxr-x---. 2 test test 4096 Oct 15 19:12 test/ -bash-4.2$...
0
votes
1answer
672 views

How to set permissions for future files?

I freely admit this is homework: Imagine you and your friend host an IT faculty in your former school. The list of attendees is in the attached text file. You need to manage permissions for ...
0
votes
2answers
327 views

setfacl -R doesn't work on Cygwin

I want to change the ACL and the default ACL for all directories and files in a base directory. In other answers (such as this one), the -R flag is used. However, I get $ setfacl -R -m u::rwx my_dir/ ...
0
votes
5answers
370 views

Is a process with effective or real uid being root still subject to permission bits of a file when accessing the file?

From https://security.stackexchange.com/a/67218/ In Unix and Linux there are two levels of permissions: standard user and superuser (usually called root). The standard user has access only to ...
1
vote
1answer
24 views

Setting access control list does not have any effect

I'm trying to set the ACLs for a particular file, but using the options R for recursive d for default m for modify does not seem to have any effect, as indicated below: /home/pkaramol/Desktop/...
0
votes
0answers
159 views

How can I determine the “alternate access control method” when the access flags in ls end with a `+`

On my Ubuntu, the directory in which pluggable media is mounted (/media/me) is owned by root and has access flags drwxr-x---+, so without the "alternate access control method" indicated by the + I ...
2
votes
2answers
474 views

chmod , umask, acl

I think the answer is "That's just how it works," but I figured I'd ask in case I'm doing something wrong. My account's default umask is 0077. I'm in the wheel group. I have a directory with this ...
3
votes
2answers
140 views

How to configure an account to have read permissions to on all files on a system, including root's files?

I need to create a kind of "backup operator" account, which can read all the files on a system for copying to a backup system without the permission to modify any of them, including those belong to ...
2
votes
1answer
981 views

How do hard links, symbolic links, and ACL folder permissions interact?

This one was a bit tricky for me to realize, but I came across a very weird behavior involving ACL extended file permissions and hard/symbolic links. I'll do my best to keep my question short and to ...
1
vote
1answer
2k views

How to change permissions on SAMBA subfolder?

I have a SAMBA server with ROLE_DOMAIN_MEMBER in Active Directory. My main aim is to make a different permissions on share sub-folders on very single share. It can be done using Linux acl or Windows ...

1 2 3 4 5 … 7