Skip to main content

Questions tagged [acl]

ACL stands for access control list. ACLs extend permissions on files beyond the traditional user-group-others triple.

Filter by
Sorted by
Tagged with
2 votes
2 answers
44 views

Why is the group permissions rwx for folder but read for newly created files within it?

On Rocky 8 (Redhat), I have a site running under Apache (httpd). I have the permissions set as follows including setguid so files created within the uploads folder inherit the group: [root@myserver ~]#...
Confounder's user avatar
0 votes
0 answers
7 views

How to configure access to `olcPPolicyDefault`?

I'm writing a utility (in Perl) that needs access to attribute olcPPolicyDefault that defines the DN of the default password policy in OpenLDAP. As the utility should not use the Admin or cn=config ...
U. Windl's user avatar
  • 1,493
1 vote
0 answers
23 views

Apply ACL group automatically to "moved in" files?

If I want mygroup to have read/write access to all the descendant files/directories of /dir1, I could run setfacl -R -d -m g:mygroup:rwX /dir1. The problem is that if I copy an existing directory like ...
Damn Vegetables's user avatar
3 votes
1 answer
313 views

Why does chown reset/remove the SUID bit and reset capabilities?

This command: sudo chown -R root:root directory will remove the SUID bit and reset all capabilities for files. I wonder why it's done silently and it's not mentioned in the man page. Weirdly the GUID ...
Artem S. Tashkinov's user avatar
0 votes
0 answers
28 views

How to set ACL permissions for SSH_AUTH_SOCK in a RemoteCommand?

I'm trying to forward my SSH agent and then grant permissions to the SSH_AUTH socket. The permissions are for another user on the remote host. My ssh config: Host myhost Hostname 1.1.1.1 ...
dimid's user avatar
  • 637
1 vote
0 answers
39 views

ACL always sets group execute permissions on files (Samba)

I have some users in the "sambashare" group and some in the "sambashareAdmin" group. Only users from the "sambashareAdmin" group are alowed to change/create stuff. All ...
MrGlasspoole's user avatar
0 votes
1 answer
31 views

Linux Group ACLs for FileServer Proxmox Container

I've installed a LXC fileserver on Proxmox Server to share a 1TB volume via NFS and CIFS and have it working with a set of user and group. Group: authors Users: Alicia Lisa Henrik Lars Group: ...
Alicia Wentworth's user avatar
-1 votes
2 answers
219 views

Unexplained mv permission denied for directory with ACL

I have a folder A inside a folder B, which is in turn in a folder C (all on the same file system). I want to mv A from B to C, but I get a permission denied error. I can mv A within B (i.e. rename A) ...
swami's user avatar
  • 205
1 vote
0 answers
63 views

ACL permissions on Chroot jail

I have the Named service in a Chroot environment, I need a user to be able to modify the live files of the path /var/named/chroot/etc and I do not want to give full permissions with sudo, I have used ...
fah81's user avatar
  • 21
0 votes
0 answers
35 views

chmod alternative working on ancestor paths? use case: g+x on all ancestors of a directory

There are some cases, where you might want to provide, e.g., "+x" permission to a group or others on a deep directory. It may not be overly complicated to apply this to every ancestor ...
AlexK973's user avatar
  • 151
2 votes
0 answers
78 views

How to make copied files respect ACL settings?

Say I open in a PDF file with permissions 600 in a graphical application. I want to "save as" it in a folder with ACL settings as follows: $ getfacl . # file: . # owner: doron # group: ...
Doron Behar's user avatar
0 votes
0 answers
57 views

Can't access file even though I am the user, I have permissions, I have chowned/chmod'd the entire directory structure, selinux off

Sorry for the copy/paste, doing this over a remote screen share: I am on Rocky Linux and I am at a total loss as to what is going on here. I can't cat/vim this file but as you can see, I am the owner,...
Grant Curell's user avatar
0 votes
1 answer
54 views

linux ls -l ACL +, . , gap How to make gap

drwxr-xr-x+ 4 root root 4096 Sep 21 04:00 test << + drwxrwxrwt. 10 root root 250 Sep 21 04:03 tmp drwxr-xr-x. 12 root root 144 Sep 19 03:42 usr << . drwxr-xr-x. 20 root ...
박용원's user avatar
0 votes
1 answer
704 views

Samba ACLs prevent "full control"

I have setup a Samba file server as a Active Directory member. The file server works fine and users can access a share, create files and folders, delete and modify them etc. Now consider the following ...
T. Pluess's user avatar
  • 552
0 votes
0 answers
89 views

ACL implementation using setuid

I am working on an assignment that mainly deals with the following topic: The main idea is to run a program as fakeroot that elevates the privileges of one user to read the file of the owner. If ...
lamdeb's user avatar
  • 1
0 votes
0 answers
42 views

Is there an equivalent to /etc/permissions with support for ACL?

I need to define a list of rights with standard UNIX and some with ACL rights. Is there a way to do check that with a config file like /etc/permissions does for UNIX rights? It is a file that is ...
Pascal P.'s user avatar
0 votes
1 answer
269 views

Do ACLs always override default chmod permissions? [duplicate]

What if I have a file on a Linux machine with user permissions of rw but assigned that user rwx permissions via ACL? Will the ACL override that default user permissions and allow execute access? nick@...
Nick Kiermaier's user avatar
4 votes
0 answers
132 views

Cygwin inheritance of Windows's security for cross-account file creation/modificaton?

On a Windows 10 laptop, I have an administrator account Admin, a non-administrator account User.Name, and the default Public account. From either Admin or User.Name accounts, files created in the ~/ ...
user2153235's user avatar
0 votes
1 answer
170 views

How can I give another user read/write access to a specific sub folder and the ability to ls the tree but only for the folder they have access to?

I have a user user1 that has a bunch of folders in their home directory, including /home/user1/data/special/files. I have another user user2. I want: user2 to be able to read/write files/folders in /...
IMTheNachoMan's user avatar
3 votes
2 answers
637 views

Not able to give write permission to other user with ACL or chmod

Anyone know why rocky can't write to /tmp/afile? Giving rocky permission as an other user with chmod o+w doesn't seem to work either 🤔 I updated the acl with: setfacl -m u:rocky:rw /tmp/afile id as ...
Newbie's user avatar
  • 33
1 vote
2 answers
114 views

ACL not applying default group

I want all new files / folders in the directory /var/www/company and all its subdirectories, to have user company and group www-data. So I've setup my ACL like this: $ getfacl /var/www/company/ ...
Black's user avatar
  • 2,098
1 vote
1 answer
116 views

Override 700 permissions so it became group-readable or at least accessible for given user but the owner?

Given that an app is writing files with 700 permissions, which means they are not readable by the group, I need these files to be readable by a special backup user account. ACL seems to be completely ...
Mikhail Karakulov's user avatar
1 vote
1 answer
17 views

Why does setfacl affect filemode by turning on group-write

I have a script that is used to re-apply ACLs on files and directories. However it has the side effect of turning on Group Write permissions that I can not explain. I have narrowed down the cause to ...
VagrantPaladin's user avatar
0 votes
2 answers
200 views

Why is an open inode system call a security risk?

According to the accepted answer here, it is simply because you would not make the access checks at the directories leading up to that file. For example, with a call to openinode(inode #, flags). My ...
user129393192's user avatar
1 vote
1 answer
177 views

How do I replace NFS4 ACL A::EVERYONE@:rxtncy with deny everyone who is not in my specified groups?

I have been asked to write ACEs such that only the owner and specific groups can access a directory. nfs4_getfacl shows A::EVERYONE@:rxtncy is in the ACL. I tried setting D::EVERYONE@:RWX but that ...
user189395's user avatar
1 vote
1 answer
649 views

How to setfacl on a directory and all its parents?

Let's say we have the following directory structure a b1 c1 c2 b2 c3 c4 And I want to use setfacl to give a user frank access to c1, I can do something like setfacl -m u:frank:rX ...
DrizzleX's user avatar
  • 125
0 votes
1 answer
2k views

Set default permissions for files received via SFTP

I'm receiving files pushed from another system via SFTP to a directory on a Linux VM. These files get the wrong permissions u=rw g= o=. However I need those files to have permissions like u=rw g=rw o=....
Niklas Letz's user avatar
0 votes
1 answer
93 views

User cannot write to directory after granting permission with setfacl

EDIT: I forgot to add /mnt/storage has been mounted using mergerfs (pooling 2 drives which are formatted as ext4) I am running Lubuntu 22.04.2 and have run the following commands (note the user radarr ...
ali's user avatar
  • 1
0 votes
1 answer
976 views

Convert Inherited Permissions into Explicit Permissions from Command-line

I have a CIFS/SAMBA network share called Public_Share on TrueNAS Scale (Debian based) and it's an shared area where everyone on my local network has full access to be able to drop files and folders. ...
willowen100's user avatar
0 votes
0 answers
131 views

User has access to directory But not able to list files inside it

The user has access to the directory But the user is NOT able list files or go inside that directory. output of getfacl: getfacl: data/emp/social/AUTO123/ user::rwx user:spidy:r-x user:lisa:rwx group::...
user avatar
1 vote
1 answer
85 views

ACL - remove any implicit permissions

How to remove all implicit permissions for a group for a directory? Lets say for a group named "A" we have specified permissions now if I remove a user from group "A", will this ...
tanmay196's user avatar
0 votes
0 answers
236 views

rsync implications of ACL backups between different source & dest file systems

I'm having an issue using rsyncd (the daemon-ized version of rsync) to back up files from my macOS to my Synology server. Here's the command that fails: % rsync -rlcAXtgoDiv --fake-super ~/scripts ...
Seamus's user avatar
  • 3,087
0 votes
1 answer
49 views

Shared /opt between distros

I have currently sat opp a Workstation where I'm using the filesystem /opt/vm to store my various virtual machines, nothing else, no binaries or config files. This filesystem is mounted to a dedicated ...
de-diac's user avatar
  • 103
0 votes
1 answer
356 views

A little difficult: how to replicate the posix acl default on zfs/nfsv4 acl?

Suppose I want a dir, which all files and directories created inside has the group permission of the group owner of the dir, and 770 as default permission. With posix ACL is really easy #create a dir.....
elbarna's user avatar
  • 12.8k
0 votes
1 answer
488 views

Is it possible to revoke delete permissions with Linux permissions or ACL's?

If i wanted to create a directory that is owned by a user don and the group owner was a group called bob, would there be any way to: Allow the group (bob) to have permissions to create and write to ...
zeek's user avatar
  • 1
0 votes
0 answers
81 views

macOS ACL settings - unable to delete Time Machine backup left-over files

(macOS Ventura - MacBook Pro M1) I have deleted Time Machine backup file manually!! (my bad). Now I am left with files in my .Trashes folder that I cannot delete, no matter what I try. I have enabled ...
cem ozel's user avatar
1 vote
1 answer
758 views

Unable to delete root-owned file under /tmp

The file and folder are owned by root but I did sudo chmod ugo+rw on both, which I confirmed with ls -l. Still, I cannot remove the file as normal user. ❯ ls -ld /tmp /tmp/perm drwxrwxrwt 46 root root ...
xeruf's user avatar
  • 571
0 votes
0 answers
89 views

Restrict access to web directory using acl

The requirement is to allow a specific user (e.g. someuser) full access to a directory (e.g. /var/www/html/someproject) via SSH/SFTP, but not allow browsing anywhere else. Is it possible using only ...
Arn's user avatar
  • 1
2 votes
1 answer
274 views

touch/mkdir seems to ignore default ACL

I am pretty sure it is a stupid mistake but I can't seem to figure it out by myself, so please have a look. I set up an ACL for the current folder like so: zigbee2mqtt@nuc:/tmp/folder$ getfacl . # ...
milkpirate's user avatar
2 votes
1 answer
547 views

setfacl -m doesn't add permission to that of the traditional file permissions?

There is a directory /test/test2/. Its owner is root and the group is test and the permission is drwxr-xr-x. I executed setfacl -m group:test:w ./ in that directory. Now, as the user test whose groups ...
Damn Vegetables's user avatar
4 votes
1 answer
1k views

Set Default ACL rwx to a directory, can't create a sub-directory as the user

As root, I created /test and set the default ACL with setfacl -m -d dog:rwx /test I verified the output of getfacl # file: test # owner: root # group: root user::rwx group::r-x other::r-x default:...
Damn Vegetables's user avatar
0 votes
1 answer
71 views

Why shouldn't a user cd to a directory using absolute path without rx to all its ancestors?

On Windows, it seems that if the user has read/write permission to the lev5 directory, but no permission at all for all its ancestors, cd c:\lev1\lev2\lev3\lev4\lev5 still works. On Linux, even if I ...
Damn Vegetables's user avatar
1 vote
0 answers
490 views

Setting ACL recursive execute permission on a folder makes files executable

Running Ubuntu 20.04 LTS running Nginx 1.18.0 and PHP-FPM to serve a website. I create a new folder as document root in /var/www, owned by the the FPM user foo, that will host a site: $ sudo mkdir foo ...
bobsoap's user avatar
  • 111
0 votes
1 answer
276 views

Accessing a file in another users home directory using setfacl

I was trying to access a file on another users home directory using acl. I have tried to do it the following way. User k9 made a file test.file and ran setfacl -m u:sai:rwx test.file. Following is ...
gst1502's user avatar
  • 101
1 vote
0 answers
329 views

NFSv4 ACLs on ZFS and other permissions

All, I've been experimenting with using NFSv4 ACLs on ZFS datasets to set default permissions in a handful of directories that are accessed using a few different means (eg. SFTP, NFS, etc.) I've been ...
Steven Stallion's user avatar
0 votes
0 answers
27 views

Complete Linux Folder Separation

Hello fellow Linux users. I'm running Debian 11. I am running an nginx web server with multiple sites. Each site's root directory is owned by a particular user. My goal is to completely make one user'...
pkSML's user avatar
  • 155
1 vote
1 answer
248 views

SETUID not effective when calling cat from AWK script from C program

Consider the following simplified example which illustrates my problem. The server's OS is Debian 11 armhf. we're in directory /botm/test/: drwx------ 2 b b 4096 Sep 27 19:27 hide -rwsr-xr-x 1 b b ...
bicyclesonthemoon's user avatar
0 votes
1 answer
621 views

Does the rsync "-a" option exclude the "-A" and "-X" option?

Rsync describes the -a or --archive mode as being equivalent to the options.-rlptgoD (no -H,-A,-X). The -A and -X options are ambiguous and iit is not clear whether they are included or excluded. -A ...
vfclists's user avatar
  • 7,619
0 votes
1 answer
836 views

Issue with file ACLs for /var/log/audit/audit.log

I have a service account that requires access to /var/log/audit/audit.log and since this user shouldn't be part of the root group nor do I want to change the ownership or group of the file, I decided ...
AnthonyBB's user avatar
  • 351
4 votes
1 answer
896 views

Why a file copied with cp not have permissions set according to default ACLs?

Question similar to Why does cp not respect ACLs? on ServerFault but different in one thing: I have set the default permissions of the new files created in the folder /home/myuser and subfolders: ...
Mario Palumbo's user avatar

1
2 3 4 5
9