Questions tagged [acl]
ACL stands for access control list. ACLs extend permissions on files beyond the traditional user-group-others triple.
333
questions
0
votes
0answers
41 views
setfacl: Operation not supported
I have an NFS share mounted on a RHEL 6 on which I set acl option:
nfs_share nfs_share_mount_point nfs defaults,acl 0 0
I need to assign an acl but I'm getting the error
setfacl: ...
-1
votes
0answers
20 views
failing test in acl even after installing coreutils
here are is the logs of installation of acl in my lfs system-
make check
here are the failed test -
FAIL: test/root/permissions.test
FAIL: test/root/setfacl.test
note- i already installed coreutils ...
1
vote
0answers
29 views
ACL to change Read Write permissions of another User's files
Is there a way that sysadmin can create an ACL(ex: read_write_acl) so that all users which are assigned "read_write_acl" can modify the file permissions (only read and write) for the files ...
0
votes
0answers
18 views
Why do files created by rslsync user/service have a “r--” mask?
I'm using Resilio Sync to sync a directory between two computers running macOS and Arch Linux, respectively.
On the Linux box, the Resilio Sync rslsync.service runs as the rslsync user, and the ...
1
vote
0answers
39 views
How to mount a filesystem in such a way that a specific user has full read access to it?
I want to perform automatic backups of a specific folder, F, in my home directory. To prevent malicious software from removing backups in the repository, however, I have created another user whose ...
0
votes
1answer
198 views
chmod returns: invalid mode:
I am trying to run the following command from Oracle ZFS docs and it fails:
$ chmod A+user:myusr:add_subdirectory:fd:allow /tank
chmod: invalid mode: ‘A+user:myusr:add_subdirectory:fd:allow’
Try '...
0
votes
2answers
41 views
Is it possible to allow passwordless sudo for a specific directory
Basically I have an application server and would like to allow the Owners/Admins of the Application to be able to run any sudo command on the directories related to the application. For example, if ...
0
votes
0answers
15 views
CentOS user can use sudo but cannot start/stop services
I want to know if it's possible to control user commands in linux. We have a group called operators, they are normal users but can view logs and such but cannot start/stop services. Is there any way ...
0
votes
1answer
40 views
Unable to untar file due to operation not permitted error
Here is the failing operation
tar -xvzf /org_files/tmp/demo/prometheus/stackdriver-prometheus-sidecar-0.7.4.tar.gz -C /org_files/tmp/demo/prometheus/
kube/
kube/full/
kube/patch-operated.sh
tar: kube/...
0
votes
1answer
22 views
How are regular permissions and ACL permissions linked?
I'm using Ubuntu and I would like to know if the regular permissions and the user,group,other permissions found in an ACL (when displayed) are actually two different sets of permissions or is it ...
0
votes
0answers
36 views
Is it possible to mount a tmpfs using the ACL filesystem option?
I have scoured the internet to find out if it is possible to mount a tmpfs with ACLs and so far I have not been able to find a solution.
Here is my problem:
sudo mount -t tmpfs tmpfs /tmp/test
sudo ...
0
votes
0answers
37 views
linux squid kerberos group filter with ext_kerberos_ldap_group_acl
i setup a new squid under redhat 8 and follow the instructions on
Redhat 8 Squid under 6.3.
All fine. Kerberos authentification works. Now i want to limit the users on a specific group. So all users ...
2
votes
0answers
38 views
Getting moved files to inherit permissions in Linux
I have set up a folder that is assigned to a group.
drwxrws---+ 2 operator IDGroup 4096 Jul 21 10:22 MyTest
The following ACL is applied:
setfacl -Rdm group:IDGroup:rw MyTest
Files created ...
1
vote
0answers
60 views
How can I set file permissions for new files in Maildir?
So I run debian 10 through VMbox on win10. I am setting up an email server right now and the things that won't let me turn in this quest is that I can't receive mail from the internet though I can ...
0
votes
0answers
88 views
StrictModes enable or disable in sshd_config in Linux
I have got question for you. I need to solve this problem.
I have got folder /keys which chmod 755 on /keys folder and ACL right such as setfacl -d -m u:myadmin:rwx /keys
In /keys folder are others ...
2
votes
2answers
43 views
ACL default::mask not being used for new file
I have a directory with the following ACL rules setup:
cd /nobackupp13/jrwrigh7
getfacl .
I get
# file: .
# owner: jrwrigh7
# group: a1983
user::rwx
group::r-x
group:a1983:r-x
mask::r-x
other::---
...
0
votes
0answers
31 views
How to set different file and directory default permissions with or without ACL within a shared directory with `setgid` and `sticky bit` set?
I have searched over on multiple SE sites, though there doesn't seem to be an answer to this question. Using setgid bit, it allows to retain parent group and sticky bit for ownership, though this ...
1
vote
0answers
344 views
Freenas and ACL permissions
I have been trying to set up the ACL on FreeNas 11.3 all day and it just does not work the way I think it should I am wondering what I am doing wrong.
All I want to do is when a user creates a file in ...
0
votes
1answer
58 views
Unable to read files in directory even though ACL set
I am having problems listing the contents of a directory /var/log/httpd by a user that has a secondary group membership of dba even though there is an ACL for it. It used to work a while ago. (I'm ...
1
vote
0answers
24 views
Default acl not yielding the permissions i want in a shared directory
I am trying to share a directory between 2 users. Both users should always have rw permissions on all existing and newly created files and subdirectories under a given path.
I added both users to the ...
1
vote
1answer
26 views
How to create a folder in Linux for other users which I can delete later?
I need to run a docker-compose up -d --build command to run a project. Some containers will write files to the volume, which will be mounted to a subfolder in my home folder.
I want to delete this ...
0
votes
1answer
38 views
Transfer a file between different users: best strategy?
I have a program that is doing some stuff. It is running under user A.
A very little part of it is to transfer a file to a directory in the home of user B.
The transfer is done by a API-call of the ...
3
votes
2answers
190 views
How to restore Linux with ACLs
I created dd backup of whole system and I would like to restore it to new (encrypted) drive. I successfully used rsync -ad to restore files and permissions to newly created ext4 filesystem (I ...
0
votes
4answers
259 views
Effective ACL permissions changing permissions
From a bash shell script, I am creating a folder and storing the mysqldump there. I am sure that there is no command related to permissions in my script. To allow an other user to access these files, ...
2
votes
0answers
29 views
How to set correct ACL to website users?
I'm trying to set correct ACL to all folders used on my shared server. That way other users will be unable to read each other files. What I did so far is next:
Owner of each website folder is owned ...
3
votes
2answers
106 views
How to have files extracted from archive inherit permission from parent folder
I'm using a Centos 8 Linux with multiple user belonging to the same group accessing a number ff folder/subfolder and files in the same FS (xfs). I want all files and folders have write permission for ...
2
votes
3answers
334 views
facl, setfacl, directory share, why does cp put the original file permissions into facl mask? Shouldn't that be cp -p behavior?
The users on this system are careful and have their umasks set to the very private 0077. However, the users would like to have group specific directories, where files may be copied so as to ...
0
votes
0answers
16 views
Setting ACL on RHEL 7
I have to set some acl for some users on some directories.
Do I have to set ACL once with -R and then the default ACL also?
Furthermore, how can I make effective these settings on a filesystem that ...
0
votes
1answer
25 views
Set RWX for files too (only set for folders) ACL
Using the following set of permissions, default RWX is set for user.
For some reasons this won't affect new created files.
Any idea how to get RWX permissions for new created files (under /home/admin)...
0
votes
1answer
66 views
ACL default permissions aren't working
I'm going through Sander Van Vugt course for RHCSA, and got stuck on ACL Lab assignment. Consider the following:
I have two following groups:
profs:x:1005:anna,audrey
students:x:1006:linda,lisa
I ...
-1
votes
2answers
181 views
Explanations on ACL Permissions [closed]
The manual page
man 5 acl
is not very helpful in this case ... im network I found something but they do not explain in an "understandable" way to people (like me) who are completely fasting on this ...
0
votes
0answers
62 views
How list users / groups having access to a Linux server that is connected to AD using sssd
Is there a command to get the list of AD Users (or) AD groups, that can access a Linux server, from the command prompt on the server itself without logging into the windows server? Below is how our ...
1
vote
1answer
34 views
How can an owner / ACL change with su / sudo be refused because of missing privileges?
I've got a file owned by root, which must get write access for normal users (particularly user pi):
pi@autoradio:/import/valen/autoradio $ ls -al autoradio.db
-rw-r--r-- 1 root root 2887050 Nov 12 ...
1
vote
0answers
137 views
Cannot cd to directory even with `rws` group permissions
Me and a teammate both have access to a server. We are both in a group that I will call team. I created a directory on the server, and with how the system is configured it defaults to drwxrws---+ with ...
0
votes
1answer
31 views
Modified mask/effective doesn't apply when creating files over ssh/sshfs vs. on machine itself (same user)
I set up mask like setfacl -R -d -m m::rw ., and it works fine on the local machine (that I am ssh'd in right now, its headless). I can have two users modify and read the directory. But when I am ...
0
votes
0answers
619 views
How do I use firewall-cmd to block all outbound connections but exclude an IP number and also allow all inbound connections?
I have 1 server using CentOS7:
Local subnet: 192.168.10.10/24 => interface eth0
WAN subnet: 123.456.879/22 => interface eth1
I want to use firewall-cmd to block all outbound connections from ...
3
votes
1answer
3k views
How do I use rsync to reliably transfer permissions & ACLs when copying from NTFS internal C: to NTFS External disk?
What options of Rsync can I reliably use/ how/ combine to either:
RELIABLY TRANSFER "working" even if "limited set" of Permissions/ ACLs reliably & without conflict between the Gray area of ...
1
vote
1answer
136 views
Opening a file *with partially unknown filename* in executable directory
I have a directory in linux which I can eXecute. Thus, I should be allowed to cd into the directory and open the file(s). I know that the file I am interested in starts with f and has a number ...
0
votes
1answer
27 views
Share access between users
I need to give a user access to an other directory (that is not owned by him).
e.g. User sam with home /home/sam needs to access /var/www/html.
I see multiple ways of doing this.
match the rights
...
1
vote
2answers
791 views
Why is NFSv4 not translating POSIX ACL's in a usable way?
I have an XFS filesystem in which some folders (using mode setting) have no public accessiblity, with group owner having read-only privileges. There is a program (which runs as user cryosparc_user) ...
0
votes
0answers
233 views
ACLs on NFS mounted directory
I'm trying to set an acl on the contents of a directory so all members of a group called prod_grp can write to a directory that is NFS mounted from another server. The acl is below:
# file: prod-...
0
votes
0answers
19 views
SETFACL to not go out of /home
So I've been testing ACL's in Linux and they work as intended. I have, for example, this folder where I've stablished permissions for users belonging to the gruop share. So far, so good...
lucas@...
3
votes
1answer
444 views
Linux File / Folder permissions
I have multiple folders that need to be accessed by multiple users. Specifically, Medusa(Which I use to track which episodes of TV Shows I do not have backed up yet), Plex(Which I use to stream my ...
2
votes
0answers
104 views
User can cd but can't ls directory [duplicate]
This directory had ACL and UNIX permissions set on it.
I've reset the directory's UNIX and ACL to the minimum, but the user cannot list the contents. Other users with similar group memberships CAN ...
0
votes
1answer
268 views
How do I set ACLs for a directory so that a particular user has rwx access for the directory and all children?
Note: to clarify the question, I am assuming an empty directory to start; I realize if it was non-empty I could use the -R option to setfacl.
Here's what I tried (wanting to give access of /tmp/...
0
votes
0answers
26 views
Hide folder that user uses currently
I'm searching for a ftp server or any idea to achieve hiding folder from others when somebody is working in it.
For example:
I have 3 folders: A B C when I working in A, anybody who is also connected ...
0
votes
1answer
592 views
NT_STATUS_ACCESS_DENIED listing \* when moving home directories to another location
I have a server and just finished building my raids. One of the partitions is supposed to house my home folders which I then want to share with my windows computers through samba. Before I begin ...
0
votes
1answer
71 views
Keeping the same user and group on files going forward?
I'd like for the ownership of all the files on my site to stay as follows:
sudo chown -R www-data:www-data /var/www/example.com/public_html
But I need to change the files with another user, so I did ...
1
vote
1answer
204 views
Can a UBIFS be set as ACL?
Running Debian Buster on Kernel 4.20.17 with systemd 241:
+PAM +AUDIT +SELINUX +IMA +APPARMOR +SMACK +SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT +GNUTLS +ACL +XZ +LZ4 +SECCOMP +BLKID +ELFUTILS +KMOD -IDN2 ...
1
vote
0answers
202 views
Does Access Control lists override group or owner permissions?
I came across the following task:
Add 3 new users - alice, bob, charles
Create a new group - marketing - and add alice, bob and charles to
that group
Create a directory - /marketing - whose owner ...
