Questions tagged [acl]
ACL stands for access control list. ACLs extend permissions on files beyond the traditional user-group-others triple.
362
questions
0
votes
0
answers
41
views
Does Samba ignore ACLs and umask?
I have an ACL on /media/drv:
sudo setfacl -dRm u::rwx,g::rwx,o::r-x /media/drv
Likewise I set the special directory group id bit on /media/drv like this:
sudo chmod g+s /media/drv
When I make a ...
- 293
0
votes
0
answers
26
views
How can I allow multiple users or groups the w+x access to a certain directory? [duplicate]
I'm aware of how to change the owner or group of a directory. However, I want to know that how I can allow multiple groups or users to have w+x access to a certain directory without chaning the actual ...
- 1
0
votes
0
answers
9
views
umask ACLs and socket permissions
I looked at the answer here How to set default file permissions for all folders/files in a directory?
And set the acls using setfacl
getfacl: Removing leading '/' from absolute path names
# file: run/...
-2
votes
2
answers
56
views
What is the difference between SUID file permission and ACL?
What is the difference between SUID and ACL file permission? Also, when should I use either?
6
votes
1
answer
198
views
Can I take away permission from a specific user in the command setfacL?
I know that this setfacl is to give permission:
setfacl -m u:user:rwx myfolder
But is there one to take permissions such as:
setfacl -m u:user:-rwx myfolder
- 75
0
votes
1
answer
42
views
User directory permissions
I'm trying to make it so that different users have different permissions for certain directories.
For example user Bob has access to read, write, and execute the directory of /configuration, but Alice ...
- 1
4
votes
1
answer
56
views
How to create a directory, where users can delete only their own files, but one user can delete anyone's files?
Consider the following setup:
# two users in groups sales
useradd edwin
useradd santos
groupadd sales
usermod -aG sales edwin
usermod -aG sales santos
# two users in group account
useradd serene
...
- 460
0
votes
1
answer
18
views
Comparing permissions of an existing file/directory with those of what would be created
Suppose I'm creating a file or directory with some name and mode argument using a system call and that operations fails with EEXIST.
Assuming I know my current umask, euid, and egid, how can I tell if ...
- 26.1k
0
votes
1
answer
36
views
How do you read all the ACLs on a particular host and change the name of a group when present?
I am trying to read all of the ACLs on a particular host using the following command:
getfacl -R /
What I want to do is look for groupA in each ACL and if groupA is present, change it to groupB, ...
- 11
0
votes
0
answers
15
views
How can I see which file's or directory's ACL setfacl is modifying while it runs?
In Windows, when I recursively modified ACLs, I could see in real-time which file's or directory's ACL was being modified, so I could get a sense of progress, even if it wasn't a progress bar. I ...
- 1
1
vote
1
answer
76
views
Find Files Recursively With Different ACLs
How would I go about finding all files recursively that have ACLs different from what I'm searching for? For example I would like to find all files in a directory that have ACLs that are not ...
- 2,087
0
votes
1
answer
272
views
Cannot delete folder on Synology NAS?
I logged in as root and tried to recursively delete the folder /volume2/Name using rm -rf
It started and deleted all the files/directories inside this folder Name, but it cannot remove the folder ...
- 111
0
votes
1
answer
20
views
Have a folder have many group based permissions
On a multi-user system, lets say I have the following groups:
"writers"
"readers"
"reviewers"
In the folder /Documents
writers should be able to write files, but not ...
- 53
1
vote
1
answer
59
views
AIX ACLs difference "permit" versus "specify"
What's the difference in AIX ACLs with permit versus specify:
This is what the documentation says:
"The permit, deny, and specify keywords are defined as follows:
permit
Grants the user or ...
- 25
1
vote
1
answer
286
views
Why do I get permission denied for a directory with acl set for the owner of the directory (after removing all standard posix permissions)?
I'm attempting to execute the ls command on a directory which has acl permissions for the owner and group of the directory (with no standard posix permissions set). This results in a Permission Denied ...
- 157
2
votes
1
answer
243
views
Why sudo apt install /path/*.deb produces permisson denied whereas sudo dpkg -i /path/*.deb works fine?
I was wondering for a long time why sudo apt fails to install local deb from some folders with error:
Failed to fetch a file... Permission denied
Recently I've tried sudo dpkg -i same path and it ...
- 763
2
votes
0
answers
162
views
Linux NFS mount on Solaris: Operation not supported on transport endpoint
Filesystem exported from Linux box, mounted on a Solaris box. On the Solaris box, certain operations fail on this filesystem. In particular:
$ touch z1; install --mode 0444 z1 z2
install: setting ...
- 21
0
votes
0
answers
18
views
Can there be multiple hosts in one computer in linux? [duplicate]
When I was reading an article about visudo command to edit sudoers file , I saw thi
root ALL=(ALL:ALL) ALL , it indicates all hosts can run the commands . What does it mean ? Can there be multiple ...
0
votes
0
answers
31
views
Why is ACL not working as intended in Bash?
I have a directory named music. I have set setgid and sticky bit on music directory.
soubhik@dev:~$ chmod 770 music ; chmod +t music/ ; chmod g+s music/ ; chown :media music/ ;ls -ld music/
drwxrws--T ...
- 101
0
votes
1
answer
33
views
how to determine through code if command needs root elevation?
how to determine (though code .. or ACL) if a command would need needs root elevation i.e sun as sudo ? some commands need sudo .. some execute without sudo .. Is there a method to determine if sudo ...
0
votes
0
answers
95
views
ACLs are not respected on FreeBSD
I am trying to set default group permission for the folder on FreeBSD 13.0
$mkdir test
$setfacl -d -m u::rwx,g::rwx,o::rx,mask::rwx test
$getfacl -d test
# file: test
# owner: john
# group: wheel
user:...
- 1
1
vote
1
answer
77
views
Disallow any internet connection
Story, you may skip.
Recently Western Digital has announced that some of older NAS devices
are in grave danger due to a exploit that makes it possible to factory
reset devices. Hundreds of NAS ...
- 115
3
votes
2
answers
272
views
Linux: an easy and elegant way to find all files with acl set?
I want to find all files with acl set.
I know this dirty solution: for find all files with acl set in dir. /etc
sudo ls -lhR /etc|grep +
Someone know a more elegant solution?
- 10.9k
0
votes
1
answer
28
views
Controlling file access permission
We have around 100 user accounts on a Linux server, and 20 of them belong to my ITOp team. I want to allow my team user accounts to only view my files in a subdirectory directly under my /home ...
- 103
0
votes
1
answer
405
views
Setting ACLs correctly for -rw-r--r--+
I've been able to set the default ACL permissions for new files like so:
sudo setfacl -Rdm u:usernamehere:rwx /var/www/path/to/files
This seems to give all new files a permission of:
-rw-r-----+
I'm ...
0
votes
1
answer
33
views
Process alert - stop or block user from doing this
How would i resolve this issue? I have already tried following How to disable a specific command for a specific user in Linux from The Geek Diary
User:clipdrop PID:8426 PPID:8401 Run Time:0(secs) ...
- 147
1
vote
1
answer
128
views
Is there a way to disable all write access for a specific user in a directory?
I recently learned about ACL and setfacl for setting per-user access rights. But there is one thing that I cannot figure out how to pull off, and that is restricting all write(*) access for a specific ...
- 11
-1
votes
1
answer
168
views
How to give full access for LDAP users on a NFS volume?
I have a NFS volume which is mounted on a RHEL VM. I'm accessing the files via a LDAP server. When a LDAP usera accesses somefile, the same file can not be modified (for example, touched) by another ...
- 1
0
votes
0
answers
261
views
zfs chown error - operation not permitted - checked ACL and still not working
zfs filesystem - try to chown, but fail...
root@tiny:/dancer# chown -R icetea:icetea
chown: changing ownership of './Taipei Space Ships/Disk2/private/SONY/SONY.MPG': Operation not permitted
try to ...
- 205
1
vote
1
answer
65
views
Force a delay when logging in over ssh
I want to achieve a delay with the login over ssh on a Linux Server.
I will describe the scenario and why I might need that:
I have a CIFS mount on the server (Domain joined) over fstab with ...
- 11
1
vote
1
answer
195
views
Sharing a directory between users (using ACL) when some files are created with only owner rw (600) permissions
Background:
I'm trying to share a folder between two users on the same machine . The normal way would be to have the two users in the same group set the parent folder to that group with rw and the s ...
- 232
0
votes
1
answer
58
views
POSIX ACL mask value is not a logical sum
I have to understand how POSIX ACL mask is recalculated. I read the man pages (https://man7.org/linux/man-pages/man1/setfacl.1.html) and there is the following explanation:
The default behavior of ...
- 113
3
votes
1
answer
550
views
How to apply and use Rich Access Control Lists with BTRFS
I am just learning about Rich Access Control Lists on Linux. My immediate objective is to give members of the group the same rights as the owner for a subdirectory tree (all files and directories ...
- 15.4k
0
votes
2
answers
254
views
Can't chmod a Windows mounted folder in Ubuntu 20.04
So I am running Ubuntu 20.04 on a virtual machine inside Windows 10. A program on Ubuntu needs to have read and write permissions for a folder I mounted via VirtualBox, so I decided to try to chmod ...
- 1
0
votes
0
answers
396
views
ZFS Ubuntu 20.04 , unable to change files even as root : Operation not permitted
I recently reinstalled Ubuntu 20.04 , now I can no longer rename / delete files without
: Operation not permitted
SELinux is disabled
I have not noticed any ACL settings on the files
lsattr
-----------...
1
vote
0
answers
32
views
SGID Bit prevents from changing to that directory
I have a problem which makes no sense in my mind. Could you please give me a hint what im doing wrong?
I have a folder called files which has those rights:
# ls -lart | grep files
drwxrws---+ 19 ...
- 23
0
votes
0
answers
46
views
Differing permissions according to getfacl and stat
I'm pretty sure I've messed up the permissions of a directory with setfacl.
Before I revert everything, I'd like to understand why getfacl and stat can give differing results for the group ownership.
...
- 6,647
0
votes
0
answers
2k
views
setfacl: Operation not supported
I have an NFS share mounted on a RHEL 6 on which I set acl option:
nfs_share nfs_share_mount_point nfs defaults,acl 0 0
I need to assign an acl but I'm getting the error
setfacl: ...
- 379
1
vote
0
answers
92
views
ACL to change Read Write permissions of another User's files
Is there a way that sysadmin can create an ACL(ex: read_write_acl) so that all users which are assigned "read_write_acl" can modify the file permissions (only read and write) for the files ...
- 63
0
votes
1
answer
712
views
chmod returns: invalid mode:
I am trying to run the following command from Oracle ZFS docs and it fails:
$ chmod A+user:myusr:add_subdirectory:fd:allow /tank
chmod: invalid mode: ‘A+user:myusr:add_subdirectory:fd:allow’
Try '...
- 119
0
votes
2
answers
351
views
Is it possible to allow passwordless sudo for a specific directory
Basically I have an application server and would like to allow the Owners/Admins of the Application to be able to run any sudo command on the directories related to the application. For example, if ...
0
votes
0
answers
21
views
CentOS user can use sudo but cannot start/stop services
I want to know if it's possible to control user commands in linux. We have a group called operators, they are normal users but can view logs and such but cannot start/stop services. Is there any way ...
- 41
0
votes
1
answer
31
views
How are regular permissions and ACL permissions linked?
I'm using Ubuntu and I would like to know if the regular permissions and the user,group,other permissions found in an ACL (when displayed) are actually two different sets of permissions or is it ...
- 1
0
votes
0
answers
208
views
linux squid kerberos group filter with ext_kerberos_ldap_group_acl
i setup a new squid under redhat 8 and follow the instructions on
Redhat 8 Squid under 6.3.
All fine. Kerberos authentification works. Now i want to limit the users on a specific group. So all users ...
- 1
2
votes
0
answers
109
views
Getting moved files to inherit permissions in Linux
I have set up a folder that is assigned to a group.
drwxrws---+ 2 operator IDGroup 4096 Jul 21 10:22 MyTest
The following ACL is applied:
setfacl -Rdm group:IDGroup:rw MyTest
Files created ...
- 21
1
vote
0
answers
277
views
How can I set file permissions for new files in Maildir?
So I run debian 10 through VMbox on win10. I am setting up an email server right now and the things that won't let me turn in this quest is that I can't receive mail from the internet though I can ...
- 13
0
votes
1
answer
1k
views
StrictModes enable or disable in sshd_config in Linux
I have got question for you. I need to solve this problem.
I have got folder /keys which chmod 755 on /keys folder and ACL right such as setfacl -d -m u:myadmin:rwx /keys
In /keys folder are others ...
- 35
2
votes
2
answers
802
views
ACL default::mask not being used for new file
I have a directory with the following ACL rules setup:
cd /nobackupp13/jrwrigh7
getfacl .
I get
# file: .
# owner: jrwrigh7
# group: a1983
user::rwx
group::r-x
group:a1983:r-x
mask::r-x
other::---
...
- 327
0
votes
0
answers
194
views
How to set different file and directory default permissions with or without ACL within a shared directory with `setgid` and `sticky bit` set?
I have searched over on multiple SE sites, though there doesn't seem to be an answer to this question. Using setgid bit, it allows to retain parent group and sticky bit for ownership, though this ...
- 101
1
vote
0
answers
984
views
Freenas and ACL permissions
I have been trying to set up the ACL on FreeNas 11.3 all day and it just does not work the way I think it should I am wondering what I am doing wrong.
All I want to do is when a user creates a file in ...
- 121