Questions tagged [acl]
ACL stands for access control list. ACLs extend permissions on files beyond the traditional user-group-others triple.
0
votes
1answer
22 views
Centos 7.5 autofs posix acl support
On centos 7.5 I have mounted NFS share(from isilon server) via autofs service.
Now when I run
setfacl -d -m g::rwx /path/to/share/location
it gives error
setfacl: /path/to/share/location Operation ...
0
votes
0answers
17 views
ACL permissions / group not getting permissions
I am trying to get ACL permissions to work the easy way by allowing groups specific access on files and folders.
However my system is ignoring group permissions entirely.
My setup: Debian 8
user ...
10
votes
1answer
134 views
Why did FreeBSD lose the w mask but Debian retained it?
I am trying to understand the difference in behaviour between FreeBSD ACLs and Linux ACLs. In particular, the inheritance mechanism for the default ACLs.
I used the following on both Debian 9.6 and ...
1
vote
1answer
73 views
Why are my new files not getting the group writeable permission?
I would like to set up a directory such that all new files are group writeable, regardless of the umask setting of the individual user.
I've created a stor group and added all users to it. Then, I ...
4
votes
0answers
45 views
Why was POSIX.1e withdrawn?
The proposed POSIX.1e standard defines a few things like ACLs that are widely supported. But the proposal itself was withdrawn. How come? The only reasoning I've found online is this quote from ...
0
votes
2answers
71 views
How to remove directory flags on linux?
I have a folder called "post", when I write getfacl post I get these results:
# file: post
# owner: www-data
# group: ftpgroup
# flags: -s-
user::rwx
group::rwx
other::r-x
default:user::rwx
default:...
-2
votes
1answer
38 views
Linux giving permission to an user to the log file
Using SFTP I want to copy the log directory from var.
By default my user have permission denied without sudo. Root is blocked for login, besides I don't want to use it in sftp.
I want to give my ...
1
vote
1answer
38 views
Permission denied when accessing a file with acls on xfs file system
I'm trying to use ACLs with the xfs file system on Amazon Linux (RHEL-ish distribution). However, when I configure acls and try to access a file with a test user, my access is denied.
I currently ...
0
votes
1answer
54 views
Read only access to directory for specific users on AIX box
We are having user1 and user2 in AIX server (7100-04-05) and we need to give readonly access to path /data/web/tmp/* (they need to be able to read contents of files). With AIXC access list we can give ...
0
votes
0answers
79 views
Linux ACLs and Samba
I have a debian stretch file server that is joined to an active directory domain. I have several samba shares set up on it. And am able to authenticate using domain accounts. But I want a samba share ...
3
votes
1answer
305 views
What is the exact purpose of `mask` in file system ACL?
When I apply default ACL in a directory I see default:mask or just mask in the following two scenario.
Scenario 1
-bash-4.2$ ls -ld test/
drwxr-x---. 2 test test 4096 Oct 15 19:12 test/
-bash-4.2$...
0
votes
1answer
81 views
How to set permissions for future files?
I freely admit this is homework:
Imagine you and your friend host an IT faculty in your former school. The list of attendees is in the attached text file. You need to manage permissions for ...
0
votes
0answers
37 views
setfacl capital X causing undesireable executable permissions to be set
I've been trying unsuccessfully to get past this for weeks and just haven't been able to (at least not to my satisfaction). I'm using setfacl to pre-permission a directory so that specific groups and ...
0
votes
2answers
72 views
setfacl -R doesn't work on Cygwin
I want to change the ACL and the default ACL for all directories and files in a base directory. In other answers (such as this one), the -R flag is used. However, I get
$ setfacl -R -m u::rwx my_dir/
...
0
votes
5answers
129 views
Is a process with effective or real uid being root still subject to permission bits of a file when accessing the file?
From https://security.stackexchange.com/a/67218/
In Unix and Linux there are two levels of permissions: standard user and superuser (usually called root).
The standard user has access only to ...
1
vote
1answer
13 views
Setting access control list does not have any effect
I'm trying to set the ACLs for a particular file, but using the options
R for recursive
d for default
m for modify
does not seem to have any effect, as indicated below:
/home/pkaramol/Desktop/...
0
votes
0answers
31 views
How can I determine the “alternate access control method” when the access flags in ls end with a `+`
On my Ubuntu, the directory in which pluggable media is mounted (/media/me) is owned by root and has access flags drwxr-x---+, so without the "alternate access control method" indicated by the + I ...
0
votes
0answers
86 views
NFSv4 Idmap Ubuntu16
I'm facing different behavior when mounting storage with NFSv4 to Ubuntu-14.04 and Ubuntu-16.04, also users are login through LDAP authentication, details as below
Ubuntu-14.04 shows me right user ...
0
votes
0answers
270 views
setfacl: Operation not supported on Ubuntu 16.04 with ext4
I'm trying to setup development environment using VirtualBox & Vagrant and have problems with setting permissions to directories.
I've found many discussions with this problems, but none of ...
2
votes
2answers
91 views
chmod , umask, acl
I think the answer is "That's just how it works," but I figured I'd ask in case I'm doing something wrong.
My account's default umask is 0077. I'm in the wheel group.
I have a directory with this ...
1
vote
2answers
71 views
How to configure an account to have read permissions to on all files on a system, including root's files?
I need to create a kind of "backup operator" account, which can read all the files on a system for copying to a backup system without the permission to modify any of them, including those belong to ...
2
votes
1answer
230 views
How do hard links, symbolic links, and ACL folder permissions interact?
This one was a bit tricky for me to realize, but I came across a very weird behavior involving ACL extended file permissions and hard/symbolic links. I'll do my best to keep my question short and to ...
0
votes
0answers
25 views
Can I overwrite global parameters smb.conf in shares section?
My question is: Can I overwrite [global] parameters wich is indicated as (S) in [share] section?
From man smb.conf:
The letter S indicates that a parameter can be specified in a service
...
1
vote
1answer
722 views
How to change permissions on SAMBA subfolder?
I have a SAMBA server with ROLE_DOMAIN_MEMBER in Active Directory. My main aim is to make a different permissions on share sub-folders on very single share. It can be done using Linux acl or Windows ...
1
vote
0answers
21 views
Network share permissions
I try to reproduce this:
6 users involved: Ann, Betty, Charls, Danny, Edward, Fred
1 share: SHARE
3 folders: Optional, Personal, Questions
SHARE (only those 6 can read)
|_Optional (only Ann and ...
0
votes
1answer
78 views
How to change ls color for entries with extended ACL?
On my system, directories and files with extended ACL's are printed like this:
which is very difficult to read when it's printed in a 10pt font like I like my console.
My LS_COLORS variable is ...
3
votes
1answer
55 views
newly created directories should be executable by default
I am using the following steps to set permissions and default acl permissions.
chown as required
find . -type d -exec chmod 770 {} \;
find . -type f -exec chmod 660 {} \;
find . -type d -exec chmod g+...
0
votes
0answers
53 views
File read permission to LDAP user
I have install openldap server with LAM6.0. Created two users and two groups. And configured ldapclient in another system. I'm able to take ssh client system with LDAP authentication.
I want to give ...
2
votes
1answer
41 views
getfacl says my unprivileged account should be able to read the contents of a dir, but it can't
I'm probably missing something glaringly obvious..... but I can't see it.
I have an ordinary directory on FreeBSD, controlled by NFSv4 ACLs. The ACLs say I can list its contents; but I can't.
Here's ...
0
votes
1answer
69 views
OpenLdap 2.4 ACL
can you help me with rights for group OpenLdap 2.4?
There is my slapd.conf
# Allow LDAPv2 client connections. This is NOT the default.
allow bind_v2
#Basic rights for authentication
access to ...
1
vote
1answer
85 views
ACL inheritance recalculation on FreeBSD - when does it happen and can I force inheritance recalculation rather than set explicit ACLs?
If I'm using NFSv4 ACLs on FreeBSD, and I change the ACLs on a directory in a way that affects the inherited ACLs of its child files+dirs (and potentially might cascade and affect the children/...
1
vote
0answers
27 views
Cannot use ACL to give user write permissions, is ACL enabled?
On a RedHat 6.9 server I have a folder named "/Data", permissions are:
drwxrwxr-x 20 root root 4.0K Apr 24 2018 Data
I want to add a user via ACL to have write permission on this folder for ...
0
votes
0answers
31 views
Enforce Files and Sub-Directories' Permissions in a Specific Directory
I am running an sftp file sharing service with multiple chrooted sftp users with without a shell. In order to make them read and write the same directory (let's say "sftp-dir"), I did the following ...
1
vote
1answer
34 views
Fastest way to locate any files/dirs with different ACLs than parent? (FreeBSD)
As the question says.
I have a data pool with ~ 10M files with access controlled by NFSv4 ACLs. It's usable from CLI, Samba, sometimes by daemon processes or rsync, and for some dirs by ftp/sftp, so ...
1
vote
1answer
139 views
how can I get/set ntfs permission from command-line (or script) on linux?
I want to copy my home directory to a new install of the same version of windows. On my new install, my user name will correspond to a new UUID, so I want to edit the permissions to add the a copy of ...
0
votes
1answer
40 views
Add a user to have permission for a particular directory in linux
I'm trying to add a user to have permission to access a particular directory on a linux filesystem.
I saw this answer here: https://superuser.com/questions/235297/allow-specific-user-permission-to-...
0
votes
0answers
47 views
How to set ACLs so a user can control any dir content, but not the dir itself and not file permissions?
I'm using FreeBSD and ZFS (I think FreeNAS uses NFSv4 ACLs).
I want to grant access to a group of users (group name: publicfiles_rw_users) and allow them to modify, create, and delete all files and ...
0
votes
0answers
26 views
Are SFTP layered permissions possible?
I am trying to set up and SFTP service with the following directory layout, which seems to have layered access:
/home/sftp/my_company << accessible by staff
|
+--employee_1 << ...
2
votes
2answers
48 views
Why can't regular users create and manage user groups?
I've been wondering if there is a good reason why a regular user can't create their own group. It would make sense for the file owner to be able to set up a group and manage file permissions. For ...
1
vote
1answer
106 views
How to stop setfacl from making my directory writable for group?
I have a group called webdev and I want only the root and the memebers of the group webdev to have write access on the directory /web. Now, Here's the problem:
# chmod -R u=rwX,go=rX /web
# ls -l /...
0
votes
1answer
182 views
Nfs4_setfacl reports error on files of mounted folder
I mounted an nfsv4 folder (both client and server are CentOS 7.4)
via command
$ sudo mount -t nfs -o v4.0,sec=krb5 ark-centos7-ker.qa.arkivio.com:/export/nfs1 /nfs4-mnt-dir
created a file via: ...
1
vote
2answers
343 views
Can't delete and remove SELinux context or ACL from a symlink in /usr/lib under root
I'm on Fedora 27 and experience problems with updating the packages by dnf update. The problem is exactly as described here: https://superuser.com/q/1005740/683161
I tried to delete symlink under /...
2
votes
0answers
212 views
How to get a user's effective permissions (traditional+acl) for a file/dir?
I've looked at other answers but can't find an answer for this.
I have a file system which uses ACLs. I want to test what the resulting set of permissions (both traditional and ACLs) will be for a ...
2
votes
0answers
362 views
SSHFS mount option default_permissions does not support ACL's - please explain
In regard to the FUSE GitHub page, I have some questions:
Does the quote below mean SSHFS does support ACL's if default_permissions is not used?
Does it mean that if one needs ACL support and proper ...
0
votes
0answers
277 views
cifs,autofs and acl
I had setup a cifs share,works fine
Smbclient works
smbclient \\\\NAS\\Video -U user%pass
I want to restrict access using posix acl(on kernel I have support for smb acl configured)
so on server NAS
...
0
votes
0answers
412 views
How to set default execute permissions in Linux for files? [duplicate]
In a directory, I want to create different files and want them to be executable as soon as it is created. I do not want to use 'chmod +x' every time I create a file. Even if I make umask 0000, the ...
0
votes
2answers
164 views
Do we have log for ACL ..?
I would like to know is there any way to list the ACL of particular user for all files. Example, for cronjob we have details in /var/spool/cron/. In the same way does ACL store the info anywhere?
1
vote
3answers
427 views
why setuid is set instead of giving privileges to others
Assuming the normal user wants to update his password at /etc/passwd.
Why it is preferable to set Setuid in a way such as -rws------ . I am assuming it works the same as if the other users will be ...
0
votes
0answers
51 views
ACL: How to prevent specific user to access certain directory that is world-accessible?
I know that with the following command I could give a user the right read/write and enter a certain directory:
setfacl -m u:user:rwx /dir/
I want to do quite the opposite in fact: The directory is ...
1
vote
1answer
39 views
What can I change with my nagios command so that it honors the destination folder ACL?
I have a nagios notifcation command that looks like this:
/usr/bin/printf "%b" "NotificationType=$NOTIFICATIONTYPE$\nService=$SERVICEDESC$\nHost=$HOSTALIAS$\nAddress=$HOSTADDRESS$\nState=$...
