Questions tagged [acl]
ACL stands for access control list. ACLs extend permissions on files beyond the traditional user-group-others triple.
406
questions
0
votes
0
answers
37
views
Can't access file even though I am the user, I have permissions, I have chowned/chmod'd the entire directory structure, selinux off
Sorry for the copy/paste, doing this over a remote screen share:
I am on Rocky Linux and I am at a total loss as to what is going on here. I can't cat/vim this file but as you can see, I am the owner,...
- 515
0
votes
1
answer
39
views
linux ls -l ACL +, . , gap How to make gap
drwxr-xr-x+ 4 root root 4096 Sep 21 04:00 test << +
drwxrwxrwt. 10 root root 250 Sep 21 04:03 tmp
drwxr-xr-x. 12 root root 144 Sep 19 03:42 usr << .
drwxr-xr-x. 20 root ...
- 1
0
votes
1
answer
26
views
Samba ACLs prevent "full control"
I have setup a Samba file server as a Active Directory member.
The file server works fine and users can access a share, create files and folders, delete and modify them etc.
Now consider the following ...
- 490
0
votes
0
answers
28
views
ACL implementation using setuid
I am working on an assignment that mainly deals with the following topic:
The main idea is to run a program as fakeroot that elevates the privileges of one user to read the file of the owner. If ...
- 1
0
votes
0
answers
39
views
Is there an equivalent to /etc/permissions with support for ACL?
I need to define a list of rights with standard UNIX and some with ACL rights.
Is there a way to do check that with a config file like /etc/permissions does for UNIX rights?
It is a file that is ...
0
votes
1
answer
45
views
Do ACLs always override default chmod permissions? [duplicate]
What if I have a file on a Linux machine with user permissions of rw but assigned that user rwx permissions via ACL?
Will the ACL override that default user permissions and allow execute access?
nick@...
4
votes
0
answers
70
views
Cygwin inheritance of Windows's security for cross-account file creation/modificaton?
On a Windows 10 laptop, I have an administrator account Admin, a
non-administrator account User.Name, and the default Public
account.
From either Admin or User.Name accounts, files created in the ~/
...
- 379
0
votes
1
answer
16
views
How can I give another user read/write access to a specific sub folder and the ability to ls the tree but only for the folder they have access to?
I have a user user1 that has a bunch of folders in their home directory, including /home/user1/data/special/files.
I have another user user2.
I want:
user2 to be able to read/write files/folders in /...
- 357
2
votes
2
answers
181
views
Not able to give write permission to other user with ACL or chmod
Anyone know why rocky can't write to /tmp/afile? Giving rocky permission as an other user with chmod o+w doesn't seem to work either 🤔
I updated the acl with: setfacl -m u:rocky:rw /tmp/afile
id as ...
- 23
1
vote
2
answers
33
views
ACL not applying default group
I want all new files / folders in the directory /var/www/company and all its subdirectories, to have user company and group www-data.
So I've setup my ACL like this:
$ getfacl /var/www/company/
...
- 1,999
1
vote
1
answer
55
views
Override 700 permissions so it became group-readable or at least accessible for given user but the owner?
Given that an app is writing files with 700 permissions, which means they are not readable by the group, I need these files to be readable by a special backup user account.
ACL seems to be completely ...
1
vote
1
answer
16
views
Why does setfacl affect filemode by turning on group-write
I have a script that is used to re-apply ACLs on files and directories. However it has the side effect of turning on Group Write permissions that I can not explain. I have narrowed down the cause to ...
0
votes
2
answers
101
views
Why is an open inode system call a security risk?
According to the accepted answer here, it is simply because you would not make the access checks at the directories leading up to that file. For example, with a call to openinode(inode #, flags).
My ...
- 143
1
vote
1
answer
45
views
How do I replace NFS4 ACL A::EVERYONE@:rxtncy with deny everyone who is not in my specified groups?
I have been asked to write ACEs such that only the owner and specific groups can access a directory.
nfs4_getfacl shows A::EVERYONE@:rxtncy is in the ACL. I tried setting D::EVERYONE@:RWX but that ...
- 153
1
vote
1
answer
162
views
How to setfacl on a directory and all its parents?
Let's say we have the following directory structure
a
b1
c1
c2
b2
c3
c4
And I want to use setfacl to give a user frank access to c1, I can do something like
setfacl -m u:frank:rX ...
- 125
0
votes
1
answer
566
views
Set default permissions for files received via SFTP
I'm receiving files pushed from another system via SFTP to a directory on a Linux VM. These files get the wrong permissions u=rw g= o=. However I need those files to have permissions like u=rw g=rw o=....
0
votes
1
answer
38
views
User cannot write to directory after granting permission with setfacl
EDIT: I forgot to add /mnt/storage has been mounted using mergerfs (pooling 2 drives which are formatted as ext4)
I am running Lubuntu 22.04.2 and have run the following commands (note the user radarr ...
- 1
0
votes
1
answer
337
views
Convert Inherited Permissions into Explicit Permissions from Command-line
I have a CIFS/SAMBA network share called Public_Share on TrueNAS Scale (Debian based) and it's an shared area where everyone on my local network has full access to be able to drop files and folders. ...
- 57
0
votes
0
answers
80
views
User has access to directory But not able to list files inside it
The user has access to the directory But the user is NOT able list files or go inside that directory.
output of getfacl:
getfacl: data/emp/social/AUTO123/
user::rwx
user:spidy:r-x
user:lisa:rwx
group::...
puneet Shah
1
vote
1
answer
35
views
ACL - remove any implicit permissions
How to remove all implicit permissions for a group for a directory? Lets say for a group named "A" we have specified permissions now if I remove a user from group "A", will this ...
- 11
0
votes
0
answers
86
views
rsync implications of ACL backups between different source & dest file systems
I'm having an issue using rsyncd (the daemon-ized version of rsync) to back up files from my macOS to my Synology server. Here's the command that fails:
% rsync -rlcAXtgoDiv --fake-super ~/scripts ...
- 2,583
0
votes
1
answer
31
views
Shared /opt between distros
I have currently sat opp a Workstation where I'm using the filesystem /opt/vm to store my various virtual machines, nothing else, no binaries or config files. This filesystem is mounted to a dedicated ...
- 103
0
votes
0
answers
26
views
Access rights through group which limits modifying/deleting others files
(I previously posted this on superuser, but thinks this question is a better fit for this stackexchange...)
Let's say I have a directory some_dir, and a group some_group with a number of users. I ...
- 900
0
votes
1
answer
194
views
A little difficult: how to replicate the posix acl default on zfs/nfsv4 acl?
Suppose I want a dir, which all files and directories created inside
has the group permission of the group owner of the dir, and 770 as
default permission.
With posix ACL is really easy
#create a dir.....
- 12.1k
0
votes
1
answer
148
views
Is it possible to revoke delete permissions with Linux permissions or ACL's?
If i wanted to create a directory that is owned by a user don and the group owner was a group called bob, would there be any way to:
Allow the group (bob) to have permissions to create and write to ...
- 1
0
votes
0
answers
41
views
macOS ACL settings - unable to delete Time Machine backup left-over files
(macOS Ventura - MacBook Pro M1)
I have deleted Time Machine backup file manually!! (my bad). Now I am left with files in my .Trashes folder that I cannot delete, no matter what I try.
I have enabled ...
- 1
0
votes
0
answers
36
views
Creating a shared directory with default group and default permissions
Problem
I want to create a shared directory, where users of a specific group can copy files to. If they do, the files should belong to and be readable by all other members of the same group. Others ...
- 1
0
votes
0
answers
24
views
Why is ACL default:other field showing a different value from Linux's own 'other' field?
So I have set a default ACL on a folder so that:
# file: Accounting/
# owner: ivan
# group: accounting
# flags: --t
user::rwx
group::r-x
other::---
default:user::rwx
default:group::r-x
default:group:...
- 101
0
votes
0
answers
113
views
Ubuntu 22.04 - URL Filter / ACL / Block websites
I configured my Raspberry Pi with Ubuntu 22.04 image as a WiFi router.
Is there a possibility that I can block certain websites like YouTube and Facebook for all users who are logged into my raspberry ...
0
votes
0
answers
62
views
Set FACL on subdirectories and files only not on parent directory
Consider a basic directory tree with and several hundred subdirectories:
/basedir/
/basedir/subdir1/
/basedir/subdir2/
...
/basedir/subdirn/
etc.
I wish to set an FACL recursively against all ...
- 49
1
vote
1
answer
225
views
Unable to delete root-owned file under /tmp
The file and folder are owned by root but I did sudo chmod ugo+rw on both, which I confirmed with ls -l.
Still, I cannot remove the file as normal user.
❯ ls -ld /tmp /tmp/perm
drwxrwxrwt 46 root root ...
- 501
0
votes
0
answers
57
views
Restrict access to web directory using acl
The requirement is to allow a specific user (e.g. someuser) full access to a directory (e.g. /var/www/html/someproject) via SSH/SFTP, but not allow browsing anywhere else.
Is it possible using only ...
- 1
0
votes
0
answers
22
views
Share everything between the home directory of two accounts [duplicate]
I have two accounts on my Kubuntu distribution, say A and B, and I want that all folders and files that user A creates in its home directory be accessible and modifiable to user B and vice versa. I ...
- 21
2
votes
1
answer
179
views
touch/mkdir seems to ignore default ACL
I am pretty sure it is a stupid mistake but I can't seem to figure it out by myself, so please have a look.
I set up an ACL for the current folder like so:
zigbee2mqtt@nuc:/tmp/folder$ getfacl .
# ...
- 123
2
votes
1
answer
214
views
setfacl -m doesn't add permission to that of the traditional file permissions?
There is a directory /test/test2/. Its owner is root and the group is test and the permission is drwxr-xr-x. I executed setfacl -m group:test:w ./ in that directory.
Now, as the user test whose groups ...
- 1,207
0
votes
0
answers
109
views
Squid proxy - route request on same local address it was received on
I have a /64 ipv6 block assigned to my server on a single interface and I would like to setup a squid proxy so that a request sent to squid on IP :0001 will be sent on :0001, a request received on :...
4
votes
1
answer
710
views
Set Default ACL rwx to a directory, can't create a sub-directory as the user
As root, I created /test and set the default ACL with
setfacl -m -d dog:rwx /test
I verified the output of getfacl
# file: test
# owner: root
# group: root
user::rwx
group::r-x
other::r-x
default:...
- 1,207
0
votes
1
answer
51
views
Why shouldn't a user cd to a directory using absolute path without rx to all its ancestors?
On Windows, it seems that if the user has read/write permission to the lev5 directory, but no permission at all for all its ancestors, cd c:\lev1\lev2\lev3\lev4\lev5 still works.
On Linux, even if I ...
- 1,207
0
votes
0
answers
328
views
Read access for Nginx, write access for developers
What are the best-practice permissions one should set in this scenario?
The document root is owned by the PHP-FPM user ("website user") who needs to be able to read and write folders+files ...
- 111
1
vote
0
answers
276
views
Setting ACL recursive execute permission on a folder makes files executable
Running Ubuntu 20.04 LTS running Nginx 1.18.0 and PHP-FPM to serve a website.
I create a new folder as document root in /var/www, owned by the the FPM user foo, that will host a site:
$ sudo mkdir foo
...
- 111
0
votes
1
answer
79
views
Accessing a file in another users home directory using setfacl
I was trying to access a file on another users home directory using acl. I have tried to do it the following way.
User k9 made a file test.file and ran
setfacl -m u:sai:rwx test.file.
Following is ...
- 101
1
vote
0
answers
214
views
NFSv4 ACLs on ZFS and other permissions
All,
I've been experimenting with using NFSv4 ACLs on ZFS datasets to set default permissions in a handful of directories that are accessed using a few different means (eg. SFTP, NFS, etc.) I've been ...
0
votes
0
answers
24
views
Complete Linux Folder Separation
Hello fellow Linux users. I'm running Debian 11. I am running an nginx web server with multiple sites. Each site's root directory is owned by a particular user. My goal is to completely make one user'...
- 155
1
vote
1
answer
154
views
SETUID not effective when calling cat from AWK script from C program
Consider the following simplified example which illustrates my problem.
The server's OS is Debian 11 armhf.
we're in directory /botm/test/:
drwx------ 2 b b 4096 Sep 27 19:27 hide
-rwsr-xr-x 1 b b ...
2
votes
0
answers
1k
views
rsync: opendir failed: Permission denied (13) from a Synology DSM7 server with synoacl
I have rsyncd running as SynoRsyncd sharing the /volume1 module :
[user@rsyncServer ~] $ ps -O user:20 -C rsync
PID USER S TTY TIME COMMAND
14290 SynoRsyncd S ? ...
- 1,991
0
votes
1
answer
294
views
Does the rsync "-a" option exclude the "-A" and "-X" option?
Rsync describes the -a or --archive mode as being equivalent to the options.-rlptgoD (no -H,-A,-X).
The -A and -X options are ambiguous and iit is not clear whether they are included or excluded.
-A ...
- 7,235
0
votes
1
answer
479
views
Issue with file ACLs for /var/log/audit/audit.log
I have a service account that requires access to /var/log/audit/audit.log and since this user shouldn't be part of the root group nor do I want to change the ownership or group of the file, I decided ...
- 351
4
votes
1
answer
465
views
Why a file copied with cp not have permissions set according to default ACLs?
Question similar to Why does cp not respect ACLs? on ServerFault but different in one thing: I have set the default permissions of the new files created in the folder /home/myuser and subfolders:
...
- 183
0
votes
1
answer
36
views
Docker Squid not enforcing time acl in configuration
I have a squid running in docker, which is not enforcing the time ACLs that are defined in the configuration. I'me using https://hub.docker.com/r/ubuntu/squid running on arm
This is my configuration ...
- 711
0
votes
1
answer
87
views
How to protect removal of a subfolder (namely .git folder) via ACL?
I've a quite big archive of git repositories in my development path, and many of them contains branches or stashes that I may have not published around.
However I want to be sure that for no reason I ...
- 182