Questions tagged [acl]
ACL stands for access control list. ACLs extend permissions on files beyond the traditional user-group-others triple.
1
vote
1answer
17 views
Can a UBIFS be set as ACL?
Running Debian Buster on Kernel 4.20.17 with systemd 241:
+PAM +AUDIT +SELINUX +IMA +APPARMOR +SMACK +SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT +GNUTLS +ACL +XZ +LZ4 +SECCOMP +BLKID +ELFUTILS +KMOD -IDN2 ...
1
vote
0answers
37 views
Does Access Control lists override group or owner permissions?
I came across the following task:
Add 3 new users - alice, bob, charles
Create a new group - marketing - and add alice, bob and charles to
that group
Create a directory - /marketing - whose owner ...
-1
votes
1answer
16 views
I am being returned to the user list upon 'successfully' signing in to my user account upon launching CentOS, instead of being sent to a desktop
So I'm in a Linux OS class at the moment. We're playing around with ACLs, users, groups, etc. very rudimentary stuff.
I (clearly) messed something up, and I'm not sure what the issue is. Every time I ...
2
votes
0answers
16 views
ACL permissions mysteriously giving execute on group
I did the following and I don't understand the end result:
$ mkdir mydir
$ setfacl -d -m u::rwX,g::rwX,o::rX,m::rwx mydir
$ touch mydir/test.txt
$ getfacl mydir/test.txt
# file: mydir/test.txt
# ...
0
votes
1answer
34 views
What would happen if a file have both regular permissions and ACL permissions?
If a file have a regular permission of read for user John, and also have an ACL permission of write for user John, what would happen in this case:
Would the regular permissions only be applied (so ...
0
votes
0answers
20 views
Better use ACL or Capability to let users start a service?
My question is openned to other propositions too.
An install sequence puts a binary in the directories (say bin1 in PATH_TO_BIN1).
It configures a service in /etc/init.d
The service has to be ...
1
vote
0answers
49 views
Do ACL permissions differentiate between UNIX file types?
When setting ACL permissions such as
sudo setfacl -Rdm g:shared_group:rwx /mnt/shared_resource
do the permissions of shared_group extent to every type of file (directory, symlink, regular file, ...
1
vote
1answer
33 views
Access Control Lists — wrong permission?
Created file1 and gave 000 permission.
[root@localhost ~]# ls -ltr file1
----------. 1 root root 0 Jan 28 08:09 file1
Gave "test" user rw permission using access control lists:
setfacl -m u:test:rw ...
2
votes
1answer
53 views
Protect overwriting folder content
Is there a way (with acl's) to protect the contents of a folder? Users should create files inside a folder but not overwrite/edit/delete them. Is this possible?
0
votes
1answer
33 views
Centos 7.5 autofs posix acl support
On centos 7.5 I have mounted NFS share(from isilon server) via autofs service.
Now when I run
setfacl -d -m g::rwx /path/to/share/location
it gives error
setfacl: /path/to/share/location Operation ...
0
votes
0answers
24 views
ACL permissions / group not getting permissions
I am trying to get ACL permissions to work the easy way by allowing groups specific access on files and folders.
However my system is ignoring group permissions entirely.
My setup: Debian 8
user ...
10
votes
1answer
156 views
Why did FreeBSD lose the w mask but Debian retained it?
I am trying to understand the difference in behaviour between FreeBSD ACLs and Linux ACLs. In particular, the inheritance mechanism for the default ACLs.
I used the following on both Debian 9.6 and ...
1
vote
1answer
76 views
Why are my new files not getting the group writeable permission?
I would like to set up a directory such that all new files are group writeable, regardless of the umask setting of the individual user.
I've created a stor group and added all users to it. Then, I ...
6
votes
1answer
102 views
Why was POSIX.1e withdrawn?
The proposed POSIX.1e standard defines a few things like ACLs that are widely supported. But the proposal itself was withdrawn. How come? The only reasoning I've found online is this quote from ...
1
vote
2answers
218 views
How to remove directory flags on linux?
I have a folder called "post", when I write getfacl post I get these results:
# file: post
# owner: www-data
# group: ftpgroup
# flags: -s-
user::rwx
group::rwx
other::r-x
default:user::rwx
default:...
-2
votes
1answer
39 views
Linux giving permission to an user to the log file
Using SFTP I want to copy the log directory from var.
By default my user have permission denied without sudo. Root is blocked for login, besides I don't want to use it in sftp.
I want to give my ...
1
vote
1answer
95 views
Permission denied when accessing a file with acls on xfs file system
I'm trying to use ACLs with the xfs file system on Amazon Linux (RHEL-ish distribution). However, when I configure acls and try to access a file with a test user, my access is denied.
I currently ...
0
votes
1answer
171 views
Read only access to directory for specific users on AIX box
We are having user1 and user2 in AIX server (7100-04-05) and we need to give readonly access to path /data/web/tmp/* (they need to be able to read contents of files). With AIXC access list we can give ...
3
votes
1answer
532 views
What is the exact purpose of `mask` in file system ACL?
When I apply default ACL in a directory I see default:mask or just mask in the following two scenario.
Scenario 1
-bash-4.2$ ls -ld test/
drwxr-x---. 2 test test 4096 Oct 15 19:12 test/
-bash-4.2$...
0
votes
1answer
176 views
How to set permissions for future files?
I freely admit this is homework:
Imagine you and your friend host an IT faculty in your former school. The list of attendees is in the attached text file. You need to manage permissions for ...
0
votes
2answers
119 views
setfacl -R doesn't work on Cygwin
I want to change the ACL and the default ACL for all directories and files in a base directory. In other answers (such as this one), the -R flag is used. However, I get
$ setfacl -R -m u::rwx my_dir/
...
0
votes
5answers
163 views
Is a process with effective or real uid being root still subject to permission bits of a file when accessing the file?
From https://security.stackexchange.com/a/67218/
In Unix and Linux there are two levels of permissions: standard user and superuser (usually called root).
The standard user has access only to ...
1
vote
1answer
13 views
Setting access control list does not have any effect
I'm trying to set the ACLs for a particular file, but using the options
R for recursive
d for default
m for modify
does not seem to have any effect, as indicated below:
/home/pkaramol/Desktop/...
0
votes
0answers
47 views
How can I determine the “alternate access control method” when the access flags in ls end with a `+`
On my Ubuntu, the directory in which pluggable media is mounted (/media/me) is owned by root and has access flags drwxr-x---+, so without the "alternate access control method" indicated by the + I ...
2
votes
2answers
149 views
chmod , umask, acl
I think the answer is "That's just how it works," but I figured I'd ask in case I'm doing something wrong.
My account's default umask is 0077. I'm in the wheel group.
I have a directory with this ...
1
vote
2answers
82 views
How to configure an account to have read permissions to on all files on a system, including root's files?
I need to create a kind of "backup operator" account, which can read all the files on a system for copying to a backup system without the permission to modify any of them, including those belong to ...
2
votes
1answer
363 views
How do hard links, symbolic links, and ACL folder permissions interact?
This one was a bit tricky for me to realize, but I came across a very weird behavior involving ACL extended file permissions and hard/symbolic links. I'll do my best to keep my question short and to ...
1
vote
1answer
939 views
How to change permissions on SAMBA subfolder?
I have a SAMBA server with ROLE_DOMAIN_MEMBER in Active Directory. My main aim is to make a different permissions on share sub-folders on very single share. It can be done using Linux acl or Windows ...
1
vote
0answers
21 views
Network share permissions
I try to reproduce this:
6 users involved: Ann, Betty, Charls, Danny, Edward, Fred
1 share: SHARE
3 folders: Optional, Personal, Questions
SHARE (only those 6 can read)
|_Optional (only Ann and ...
0
votes
1answer
84 views
How to change ls color for entries with extended ACL?
On my system, directories and files with extended ACL's are printed like this:
which is very difficult to read when it's printed in a 10pt font like I like my console.
My LS_COLORS variable is ...
3
votes
1answer
61 views
newly created directories should be executable by default
I am using the following steps to set permissions and default acl permissions.
chown as required
find . -type d -exec chmod 770 {} \;
find . -type f -exec chmod 660 {} \;
find . -type d -exec chmod g+...
0
votes
0answers
58 views
File read permission to LDAP user
I have install openldap server with LAM6.0. Created two users and two groups. And configured ldapclient in another system. I'm able to take ssh client system with LDAP authentication.
I want to give ...
2
votes
1answer
44 views
getfacl says my unprivileged account should be able to read the contents of a dir, but it can't
I'm probably missing something glaringly obvious..... but I can't see it.
I have an ordinary directory on FreeBSD, controlled by NFSv4 ACLs. The ACLs say I can list its contents; but I can't.
Here's ...
0
votes
1answer
74 views
OpenLdap 2.4 ACL
can you help me with rights for group OpenLdap 2.4?
There is my slapd.conf
# Allow LDAPv2 client connections. This is NOT the default.
allow bind_v2
#Basic rights for authentication
access to ...
1
vote
1answer
129 views
ACL inheritance recalculation on FreeBSD - when does it happen and can I force inheritance recalculation rather than set explicit ACLs?
If I'm using NFSv4 ACLs on FreeBSD, and I change the ACLs on a directory in a way that affects the inherited ACLs of its child files+dirs (and potentially might cascade and affect the children/...
1
vote
0answers
29 views
Cannot use ACL to give user write permissions, is ACL enabled?
On a RedHat 6.9 server I have a folder named "/Data", permissions are:
drwxrwxr-x 20 root root 4.0K Apr 24 2018 Data
I want to add a user via ACL to have write permission on this folder for ...
0
votes
0answers
35 views
Enforce Files and Sub-Directories' Permissions in a Specific Directory
I am running an sftp file sharing service with multiple chrooted sftp users with without a shell. In order to make them read and write the same directory (let's say "sftp-dir"), I did the following ...
1
vote
1answer
41 views
Fastest way to locate any files/dirs with different ACLs than parent? (FreeBSD)
As the question says.
I have a data pool with ~ 10M files with access controlled by NFSv4 ACLs. It's usable from CLI, Samba, sometimes by daemon processes or rsync, and for some dirs by ftp/sftp, so ...
1
vote
1answer
156 views
how can I get/set ntfs permission from command-line (or script) on linux?
I want to copy my home directory to a new install of the same version of windows. On my new install, my user name will correspond to a new UUID, so I want to edit the permissions to add the a copy of ...
0
votes
1answer
44 views
Add a user to have permission for a particular directory in linux
I'm trying to add a user to have permission to access a particular directory on a linux filesystem.
I saw this answer here: https://superuser.com/questions/235297/allow-specific-user-permission-to-...
0
votes
0answers
52 views
How to set ACLs so a user can control any dir content, but not the dir itself and not file permissions?
I'm using FreeBSD and ZFS (I think FreeNAS uses NFSv4 ACLs).
I want to grant access to a group of users (group name: publicfiles_rw_users) and allow them to modify, create, and delete all files and ...
0
votes
0answers
26 views
Are SFTP layered permissions possible?
I am trying to set up and SFTP service with the following directory layout, which seems to have layered access:
/home/sftp/my_company << accessible by staff
|
+--employee_1 << ...
2
votes
2answers
51 views
Why can't regular users create and manage user groups?
I've been wondering if there is a good reason why a regular user can't create their own group. It would make sense for the file owner to be able to set up a group and manage file permissions. For ...
1
vote
1answer
124 views
How to stop setfacl from making my directory writable for group?
I have a group called webdev and I want only the root and the memebers of the group webdev to have write access on the directory /web. Now, Here's the problem:
# chmod -R u=rwX,go=rX /web
# ls -l /...
0
votes
1answer
235 views
Nfs4_setfacl reports error on files of mounted folder
I mounted an nfsv4 folder (both client and server are CentOS 7.4)
via command
$ sudo mount -t nfs -o v4.0,sec=krb5 ark-centos7-ker.qa.arkivio.com:/export/nfs1 /nfs4-mnt-dir
created a file via: ...
1
vote
2answers
387 views
Can't delete and remove SELinux context or ACL from a symlink in /usr/lib under root
I'm on Fedora 27 and experience problems with updating the packages by dnf update. The problem is exactly as described here: https://superuser.com/q/1005740/683161
I tried to delete symlink under /...
2
votes
0answers
251 views
How to get a user's effective permissions (traditional+acl) for a file/dir?
I've looked at other answers but can't find an answer for this.
I have a file system which uses ACLs. I want to test what the resulting set of permissions (both traditional and ACLs) will be for a ...
2
votes
0answers
394 views
SSHFS mount option default_permissions does not support ACL's - please explain
In regard to the FUSE GitHub page, I have some questions:
Does the quote below mean SSHFS does support ACL's if default_permissions is not used?
Does it mean that if one needs ACL support and proper ...
0
votes
2answers
211 views
Do we have log for ACL ..?
I would like to know is there any way to list the ACL of particular user for all files. Example, for cronjob we have details in /var/spool/cron/. In the same way does ACL store the info anywhere?
1
vote
3answers
531 views
why setuid is set instead of giving privileges to others
Assuming the normal user wants to update his password at /etc/passwd.
Why it is preferable to set Setuid in a way such as -rws------ . I am assuming it works the same as if the other users will be ...
