Questions tagged [acl]

ACL stands for access control list. ACLs extend permissions on files beyond the traditional user-group-others triple.

Filter by
Sorted by
Tagged with
0 votes
0 answers
41 views

Does Samba ignore ACLs and umask?

I have an ACL on /media/drv: sudo setfacl -dRm u::rwx,g::rwx,o::r-x /media/drv Likewise I set the special directory group id bit on /media/drv like this: sudo chmod g+s /media/drv When I make a ...
user avatar
0 votes
0 answers
26 views

How can I allow multiple users or groups the w+x access to a certain directory? [duplicate]

I'm aware of how to change the owner or group of a directory. However, I want to know that how I can allow multiple groups or users to have w+x access to a certain directory without chaning the actual ...
user avatar
  • 1
0 votes
0 answers
9 views

umask ACLs and socket permissions

I looked at the answer here How to set default file permissions for all folders/files in a directory? And set the acls using setfacl getfacl: Removing leading '/' from absolute path names # file: run/...
user avatar
-2 votes
2 answers
56 views

What is the difference between SUID file permission and ACL?

What is the difference between SUID and ACL file permission? Also, when should I use either?
user avatar
6 votes
1 answer
198 views

Can I take away permission from a specific user in the command setfacL?

I know that this setfacl is to give permission: setfacl -m u:user:rwx myfolder But is there one to take permissions such as: setfacl -m u:user:-rwx myfolder
user avatar
  • 75
0 votes
1 answer
42 views

User directory permissions

I'm trying to make it so that different users have different permissions for certain directories. For example user Bob has access to read, write, and execute the directory of /configuration, but Alice ...
user avatar
  • 1
4 votes
1 answer
56 views

How to create a directory, where users can delete only their own files, but one user can delete anyone's files?

Consider the following setup: # two users in groups sales useradd edwin useradd santos groupadd sales usermod -aG sales edwin usermod -aG sales santos # two users in group account useradd serene ...
user avatar
  • 460
0 votes
1 answer
18 views

Comparing permissions of an existing file/directory with those of what would be created

Suppose I'm creating a file or directory with some name and mode argument using a system call and that operations fails with EEXIST. Assuming I know my current umask, euid, and egid, how can I tell if ...
user avatar
  • 26.1k
0 votes
1 answer
36 views

How do you read all the ACLs on a particular host and change the name of a group when present?

I am trying to read all of the ACLs on a particular host using the following command: getfacl -R / What I want to do is look for groupA in each ACL and if groupA is present, change it to groupB, ...
user avatar
0 votes
0 answers
15 views

How can I see which file's or directory's ACL setfacl is modifying while it runs?

In Windows, when I recursively modified ACLs, I could see in real-time which file's or directory's ACL was being modified, so I could get a sense of progress, even if it wasn't a progress bar. I ...
user avatar
  • 1
1 vote
1 answer
76 views

Find Files Recursively With Different ACLs

How would I go about finding all files recursively that have ACLs different from what I'm searching for? For example I would like to find all files in a directory that have ACLs that are not ...
user avatar
  • 2,087
0 votes
1 answer
272 views

Cannot delete folder on Synology NAS?

I logged in as root and tried to recursively delete the folder /volume2/Name using rm -rf It started and deleted all the files/directories inside this folder Name, but it cannot remove the folder ...
user avatar
  • 111
0 votes
1 answer
20 views

Have a folder have many group based permissions

On a multi-user system, lets say I have the following groups: "writers" "readers" "reviewers" In the folder /Documents writers should be able to write files, but not ...
user avatar
  • 53
1 vote
1 answer
59 views

AIX ACLs difference "permit" versus "specify"

What's the difference in AIX ACLs with permit versus specify: This is what the documentation says: "The permit, deny, and specify keywords are defined as follows: permit Grants the user or ...
user avatar
  • 25
1 vote
1 answer
286 views

Why do I get permission denied for a directory with acl set for the owner of the directory (after removing all standard posix permissions)?

I'm attempting to execute the ls command on a directory which has acl permissions for the owner and group of the directory (with no standard posix permissions set). This results in a Permission Denied ...
user avatar
2 votes
1 answer
243 views

Why sudo apt install /path/*.deb produces permisson denied whereas sudo dpkg -i /path/*.deb works fine?

I was wondering for a long time why sudo apt fails to install local deb from some folders with error: Failed to fetch a file... Permission denied Recently I've tried sudo dpkg -i same path and it ...
user avatar
2 votes
0 answers
162 views

Linux NFS mount on Solaris: Operation not supported on transport endpoint

Filesystem exported from Linux box, mounted on a Solaris box. On the Solaris box, certain operations fail on this filesystem. In particular: $ touch z1; install --mode 0444 z1 z2 install: setting ...
user avatar
  • 21
0 votes
0 answers
18 views

Can there be multiple hosts in one computer in linux? [duplicate]

When I was reading an article about visudo command to edit sudoers file , I saw thi root ALL=(ALL:ALL) ALL , it indicates all hosts can run the commands . What does it mean ? Can there be multiple ...
user avatar
0 votes
0 answers
31 views

Why is ACL not working as intended in Bash?

I have a directory named music. I have set setgid and sticky bit on music directory. soubhik@dev:~$ chmod 770 music ; chmod +t music/ ; chmod g+s music/ ; chown :media music/ ;ls -ld music/ drwxrws--T ...
user avatar
0 votes
1 answer
33 views

how to determine through code if command needs root elevation?

how to determine (though code .. or ACL) if a command would need needs root elevation i.e sun as sudo ? some commands need sudo .. some execute without sudo .. Is there a method to determine if sudo ...
user avatar
0 votes
0 answers
95 views

ACLs are not respected on FreeBSD

I am trying to set default group permission for the folder on FreeBSD 13.0 $mkdir test $setfacl -d -m u::rwx,g::rwx,o::rx,mask::rwx test $getfacl -d test # file: test # owner: john # group: wheel user:...
user avatar
1 vote
1 answer
77 views

Disallow any internet connection

Story, you may skip. Recently Western Digital has announced that some of older NAS devices are in grave danger due to a exploit that makes it possible to factory reset devices. Hundreds of NAS ...
user avatar
  • 115
3 votes
2 answers
272 views

Linux: an easy and elegant way to find all files with acl set?

I want to find all files with acl set. I know this dirty solution: for find all files with acl set in dir. /etc sudo ls -lhR /etc|grep + Someone know a more elegant solution?
user avatar
  • 10.9k
0 votes
1 answer
28 views

Controlling file access permission

We have around 100 user accounts on a Linux server, and 20 of them belong to my ITOp team. I want to allow my team user accounts to only view my files in a subdirectory directly under my /home ...
user avatar
  • 103
0 votes
1 answer
405 views

Setting ACLs correctly for -rw-r--r--+

I've been able to set the default ACL permissions for new files like so: sudo setfacl -Rdm u:usernamehere:rwx /var/www/path/to/files This seems to give all new files a permission of: -rw-r-----+ I'm ...
user avatar
0 votes
1 answer
33 views

Process alert - stop or block user from doing this

How would i resolve this issue? I have already tried following How to disable a specific command for a specific user in Linux from The Geek Diary User:clipdrop PID:8426 PPID:8401 Run Time:0(secs) ...
user avatar
1 vote
1 answer
128 views

Is there a way to disable all write access for a specific user in a directory?

I recently learned about ACL and setfacl for setting per-user access rights. But there is one thing that I cannot figure out how to pull off, and that is restricting all write(*) access for a specific ...
user avatar
  • 11
-1 votes
1 answer
168 views

How to give full access for LDAP users on a NFS volume?

I have a NFS volume which is mounted on a RHEL VM. I'm accessing the files via a LDAP server. When a LDAP usera accesses somefile, the same file can not be modified (for example, touched) by another ...
user avatar
  • 1
0 votes
0 answers
261 views

zfs chown error - operation not permitted - checked ACL and still not working

zfs filesystem - try to chown, but fail... root@tiny:/dancer# chown -R icetea:icetea chown: changing ownership of './Taipei Space Ships/Disk2/private/SONY/SONY.MPG': Operation not permitted try to ...
user avatar
1 vote
1 answer
65 views

Force a delay when logging in over ssh

I want to achieve a delay with the login over ssh on a Linux Server. I will describe the scenario and why I might need that: I have a CIFS mount on the server (Domain joined) over fstab with ...
user avatar
  • 11
1 vote
1 answer
195 views

Sharing a directory between users (using ACL) when some files are created with only owner rw (600) permissions

Background: I'm trying to share a folder between two users on the same machine . The normal way would be to have the two users in the same group set the parent folder to that group with rw and the s ...
user avatar
  • 232
0 votes
1 answer
58 views

POSIX ACL mask value is not a logical sum

I have to understand how POSIX ACL mask is recalculated. I read the man pages (https://man7.org/linux/man-pages/man1/setfacl.1.html) and there is the following explanation: The default behavior of ...
user avatar
  • 113
3 votes
1 answer
550 views

How to apply and use Rich Access Control Lists with BTRFS

I am just learning about Rich Access Control Lists on Linux. My immediate objective is to give members of the group the same rights as the owner for a subdirectory tree (all files and directories ...
user avatar
  • 15.4k
0 votes
2 answers
254 views

Can't chmod a Windows mounted folder in Ubuntu 20.04

So I am running Ubuntu 20.04 on a virtual machine inside Windows 10. A program on Ubuntu needs to have read and write permissions for a folder I mounted via VirtualBox, so I decided to try to chmod ...
user avatar
0 votes
0 answers
396 views

ZFS Ubuntu 20.04 , unable to change files even as root : Operation not permitted

I recently reinstalled Ubuntu 20.04 , now I can no longer rename / delete files without : Operation not permitted SELinux is disabled I have not noticed any ACL settings on the files lsattr -----------...
user avatar
1 vote
0 answers
32 views

SGID Bit prevents from changing to that directory

I have a problem which makes no sense in my mind. Could you please give me a hint what im doing wrong? I have a folder called files which has those rights: # ls -lart | grep files drwxrws---+ 19 ...
user avatar
  • 23
0 votes
0 answers
46 views

Differing permissions according to getfacl and stat

I'm pretty sure I've messed up the permissions of a directory with setfacl. Before I revert everything, I'd like to understand why getfacl and stat can give differing results for the group ownership. ...
user avatar
0 votes
0 answers
2k views

setfacl: Operation not supported

I have an NFS share mounted on a RHEL 6 on which I set acl option: nfs_share nfs_share_mount_point nfs defaults,acl 0 0 I need to assign an acl but I'm getting the error setfacl: ...
user avatar
  • 379
1 vote
0 answers
92 views

ACL to change Read Write permissions of another User's files

Is there a way that sysadmin can create an ACL(ex: read_write_acl) so that all users which are assigned "read_write_acl" can modify the file permissions (only read and write) for the files ...
user avatar
  • 63
0 votes
1 answer
712 views

chmod returns: invalid mode:

I am trying to run the following command from Oracle ZFS docs and it fails: $ chmod A+user:myusr:add_subdirectory:fd:allow /tank chmod: invalid mode: ‘A+user:myusr:add_subdirectory:fd:allow’ Try '...
user avatar
  • 119
0 votes
2 answers
351 views

Is it possible to allow passwordless sudo for a specific directory

Basically I have an application server and would like to allow the Owners/Admins of the Application to be able to run any sudo command on the directories related to the application. For example, if ...
user avatar
0 votes
0 answers
21 views

CentOS user can use sudo but cannot start/stop services

I want to know if it's possible to control user commands in linux. We have a group called operators, they are normal users but can view logs and such but cannot start/stop services. Is there any way ...
user avatar
  • 41
0 votes
1 answer
31 views

How are regular permissions and ACL permissions linked?

I'm using Ubuntu and I would like to know if the regular permissions and the user,group,other permissions found in an ACL (when displayed) are actually two different sets of permissions or is it ...
user avatar
  • 1
0 votes
0 answers
208 views

linux squid kerberos group filter with ext_kerberos_ldap_group_acl

i setup a new squid under redhat 8 and follow the instructions on Redhat 8 Squid under 6.3. All fine. Kerberos authentification works. Now i want to limit the users on a specific group. So all users ...
user avatar
2 votes
0 answers
109 views

Getting moved files to inherit permissions in Linux

I have set up a folder that is assigned to a group. drwxrws---+ 2 operator IDGroup 4096 Jul 21 10:22 MyTest The following ACL is applied: setfacl -Rdm group:IDGroup:rw MyTest Files created ...
user avatar
  • 21
1 vote
0 answers
277 views

How can I set file permissions for new files in Maildir?

So I run debian 10 through VMbox on win10. I am setting up an email server right now and the things that won't let me turn in this quest is that I can't receive mail from the internet though I can ...
user avatar
  • 13
0 votes
1 answer
1k views

StrictModes enable or disable in sshd_config in Linux

I have got question for you. I need to solve this problem. I have got folder /keys which chmod 755 on /keys folder and ACL right such as setfacl -d -m u:myadmin:rwx /keys In /keys folder are others ...
user avatar
  • 35
2 votes
2 answers
802 views

ACL default::mask not being used for new file

I have a directory with the following ACL rules setup: cd /nobackupp13/jrwrigh7 getfacl . I get # file: . # owner: jrwrigh7 # group: a1983 user::rwx group::r-x group:a1983:r-x mask::r-x other::--- ...
user avatar
0 votes
0 answers
194 views

How to set different file and directory default permissions with or without ACL within a shared directory with `setgid` and `sticky bit` set?

I have searched over on multiple SE sites, though there doesn't seem to be an answer to this question. Using setgid bit, it allows to retain parent group and sticky bit for ownership, though this ...
user avatar
  • 101
1 vote
0 answers
984 views

Freenas and ACL permissions

I have been trying to set up the ACL on FreeNas 11.3 all day and it just does not work the way I think it should I am wondering what I am doing wrong. All I want to do is when a user creates a file in ...
user avatar
  • 121

1
2 3 4 5
8