Questions tagged [acl]

ACL stands for access control list. ACLs extend permissions on files beyond the traditional user-group-others triple.

Filter by
Sorted by
Tagged with
1
vote
0answers
20 views

Why is NFSv4 not translating POSIX ACL's in a usable way?

I have an XFS filesystem in which some folders (using mode setting) have no public accessiblity, with group owner having read-only privileges. There is a program (which runs as user cryosparc_user) ...
0
votes
0answers
18 views

ACLs on NFS mounted directory

I'm trying to set an acl on the contents of a directory so all members of a group called prod_grp can write to a directory that is NFS mounted from another server. The acl is below: # file: prod-...
3
votes
2answers
106 views

How to configure an account to have read permissions to on all files on a system, including root's files?

I need to create a kind of "backup operator" account, which can read all the files on a system for copying to a backup system without the permission to modify any of them, including those belong to ...
130
votes
3answers
184k views

Make all new files in a directory accessible to a group

Suppose I have two users Alice and Bob and a group GROUPNAME and a folder foo, both users are members of G (using linux and ext3). If I save as user Alice a file under foo, the permissions are: -rw-...
0
votes
0answers
16 views

SETFACL to not go out of /home

So I've been testing ACL's in Linux and they work as intended. I have, for example, this folder where I've stablished permissions for users belonging to the gruop share. So far, so good... lucas@...
1
vote
1answer
1k views

How to change permissions on SAMBA subfolder?

I have a SAMBA server with ROLE_DOMAIN_MEMBER in Active Directory. My main aim is to make a different permissions on share sub-folders on very single share. It can be done using Linux acl or Windows ...
3
votes
1answer
94 views

Linux File / Folder permissions

I have multiple folders that need to be accessed by multiple users. Specifically, Medusa(Which I use to track which episodes of TV Shows I do not have backed up yet), Plex(Which I use to stream my ...
5
votes
2answers
534 views

Why does default setfacl fail for nested directories?

I am using sftp with the internal-sftp for debian. What I'm trying to acomplish is to jail all users to a specific folder which is working fine. I also need to have a single user that has "admin" ...
2
votes
0answers
103 views

User can cd but can't ls directory [duplicate]

This directory had ACL and UNIX permissions set on it. I've reset the directory's UNIX and ACL to the minimum, but the user cannot list the contents. Other users with similar group memberships CAN ...
4
votes
2answers
9k views

What does the “flags” field in getfacl mean?

I'm trying to set permissions on a server between users using ACLs. When I'm checking their status on one of directories using getfacl dir10, it shows: root@svn:/srv/resources/somedir# getfacl dir10 #...
0
votes
1answer
50 views

How do I set ACLs for a directory so that a particular user has rwx access for the directory and all children?

Note: to clarify the question, I am assuming an empty directory to start; I realize if it was non-empty I could use the -R option to setfacl. Here's what I tried (wanting to give access of /tmp/...
0
votes
0answers
19 views

ACL vs Groups, Which one is better? [duplicate]

i recently heard about ACL in Linux, and read that we can allow permissions to specific users using ACL. But my question is we can do the same using the groups then why do we use ACL or is it me who ...
26
votes
2answers
62k views

How to remove ACL from a directory and back to usual access control?

We use a hosting server of FreeBSD 10.3, where we don't have the authority to be a superuser. We use the server to run apache2 for web pages of our company. The previous administrator of our web pages ...
7
votes
4answers
1k views

facl ignoring the “x” permission but only on files

When I use setfacl to manage on what permissions should the children files / directories have, for some reason the files have all the permissions except the execute ("x") one. someuser@someuser-MS-...
0
votes
0answers
22 views

Hide folder that user uses currently

I'm searching for a ftp server or any idea to achieve hiding folder from others when somebody is working in it. For example: I have 3 folders: A B C when I working in A, anybody who is also connected ...
0
votes
1answer
42 views

NT_STATUS_ACCESS_DENIED listing \* when moving home directories to another location

I have a server and just finished building my raids. One of the partitions is supposed to house my home folders which I then want to share with my windows computers through samba. Before I begin ...
0
votes
0answers
17 views

ACL: Wrong owner & group after mounting

I try mounting the filesystem of our NAS on my Linux machine. I mounted the filesystem from the share with my username: sudo mount -t cifs -o user=username,sec=ntlmv2i //share /run/media/user/...
0
votes
1answer
59 views

Keeping the same user and group on files going forward?

I'd like for the ownership of all the files on my site to stay as follows: sudo chown -R www-data:www-data /var/www/example.com/public_html But I need to change the files with another user, so I did ...
20
votes
4answers
10k views

Precedence of user and group owner in file permissions

I just ran into something unexpected (for me) regarding file permissions on Linux (Arch Linux). Basically I have: userX in groupX fileX userX:groupX ---rwx---- What puzzles me: I cannot perform any ...
1
vote
1answer
43 views

Folder Permissions Issue

I am currently running an Ubuntu 14 linux server. That server acts as a CDN for real estate property images for my website. I used upstart to create a script which respawns a PHP image batcher script. ...
0
votes
1answer
759 views

Access denied on folders for users though they have the rwx permission on SUSE Linux

I have a folder /PPI/production/PDF_plan/ on SLES 12 SP1 system. Please find the details below. SERVER1:~ # getfacl /PPI/production/PDF_plan/ getfacl: Removing leading '/' from absolute path names # ...
1
vote
1answer
62 views

Can a UBIFS be set as ACL?

Running Debian Buster on Kernel 4.20.17 with systemd 241: +PAM +AUDIT +SELINUX +IMA +APPARMOR +SMACK +SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT +GNUTLS +ACL +XZ +LZ4 +SECCOMP +BLKID +ELFUTILS +KMOD -IDN2 ...
8
votes
1answer
203 views

Why was POSIX.1e withdrawn?

The proposed POSIX.1e standard defines a few things like ACLs that are widely supported. But the proposal itself was withdrawn. How come? The only reasoning I've found online is this quote from ...
1
vote
0answers
83 views

Does Access Control lists override group or owner permissions?

I came across the following task: Add 3 new users - alice, bob, charles Create a new group - marketing - and add alice, bob and charles to that group Create a directory - /marketing - whose owner ...
-1
votes
1answer
18 views

I am being returned to the user list upon 'successfully' signing in to my user account upon launching CentOS, instead of being sent to a desktop

So I'm in a Linux OS class at the moment. We're playing around with ACLs, users, groups, etc. very rudimentary stuff. I (clearly) messed something up, and I'm not sure what the issue is. Every time I ...
10
votes
2answers
11k views

Difference between chmod vs ACL

I understand chmod and chown and how the permission bits work, but there is another permission system inside Linux, ACL with setfacl and getfacl, so this makes me wonder. What's the difference ...
2
votes
0answers
40 views

ACL permissions mysteriously giving execute on group

I did the following and I don't understand the end result: $ mkdir mydir $ setfacl -d -m u::rwX,g::rwX,o::rX,m::rwx mydir $ touch mydir/test.txt $ getfacl mydir/test.txt # file: mydir/test.txt # ...
0
votes
1answer
43 views

What would happen if a file have both regular permissions and ACL permissions?

If a file have a regular permission of read for user John, and also have an ACL permission of write for user John, what would happen in this case: Would the regular permissions only be applied (so ...
1
vote
2answers
3k views

Does “defaults” option include “acl” option in /etc/fstab?

I'm working with ACLs on CentOS 7 and noticed that the partition (/) where ACLs are applied is mounted with defaults options. As far as I know ACLs need that the acl option is enabled in the mount, ...
0
votes
0answers
28 views

Better use ACL or Capability to let users start a service?

My question is openned to other propositions too. An install sequence puts a binary in the directories (say bin1 in PATH_TO_BIN1). It configures a service in /etc/init.d The service has to be ...
4
votes
2answers
3k views

setfacl incorrectly changes group permissions

To backup the "/home" directory tree of a server, I've created a 'backup' account and used setfacl to make the whole directory readable by it. My cron job runs this command as root each night: ...
1
vote
0answers
63 views

Do ACL permissions differentiate between UNIX file types?

When setting ACL permissions such as sudo setfacl -Rdm g:shared_group:rwx /mnt/shared_resource do the permissions of shared_group extent to every type of file (directory, symlink, regular file, ...
1
vote
1answer
83 views

Access Control Lists — wrong permission?

Created file1 and gave 000 permission. [root@localhost ~]# ls -ltr file1 ----------. 1 root root 0 Jan 28 08:09 file1 Gave "test" user rw permission using access control lists: setfacl -m u:test:rw ...
16
votes
2answers
10k views

Allow owner to create & read files, but not modify or delete

I would like to give a user permissions to create and read files in a particular directory, but not to modify or delete files. If the user can append to files that is ok, but I'd rather not. This is ...
2
votes
1answer
84 views

Protect overwriting folder content

Is there a way (with acl's) to protect the contents of a folder? Users should create files inside a folder but not overwrite/edit/delete them. Is this possible?
0
votes
1answer
208 views

Webserver-User has no Shell-Access but needs SSH-Keys or Permission change of directory?

Regarding my previous question and a possible solution I was advised to ask for another solution in a new question. (Here is the old thread: SSH Agent-Forwarding works, but what about sudo -u ...
0
votes
1answer
105 views

Centos 7.5 autofs posix acl support

On centos 7.5 I have mounted NFS share(from isilon server) via autofs service. Now when I run setfacl -d -m g::rwx /path/to/share/location it gives error setfacl: /path/to/share/location Operation ...
0
votes
0answers
27 views

ACL permissions / group not getting permissions

I am trying to get ACL permissions to work the easy way by allowing groups specific access on files and folders. However my system is ignoring group permissions entirely. My setup: Debian 8 user ...
10
votes
1answer
178 views

Why did FreeBSD lose the w mask but Debian retained it?

I am trying to understand the difference in behaviour between FreeBSD ACLs and Linux ACLs. In particular, the inheritance mechanism for the default ACLs. I used the following on both Debian 9.6 and ...
1
vote
1answer
96 views

Why are my new files not getting the group writeable permission?

I would like to set up a directory such that all new files are group writeable, regardless of the umask setting of the individual user. I've created a stor group and added all users to it. Then, I ...
2
votes
0answers
583 views

Converting POSIX ACL to NFSv4 ACL

We are facing data migrating from nfsv3 to nfsv4. We set POSIX ACL for some folders and files on nfsv3 by using setfacl which are exporting from Linux box as a nfs server. Now we are going to ...
4
votes
1answer
512 views

ACL not honored by mv and tar

I'm trying to setup an area on my ext4 filesystem (on Debian Jessie), where all "staff" group members can read and write existing and newly created files. The filesystem is mounted with acl option: ...
1
vote
2answers
466 views

Can't delete and remove SELinux context or ACL from a symlink in /usr/lib under root

I'm on Fedora 27 and experience problems with updating the packages by dnf update. The problem is exactly as described here: https://superuser.com/q/1005740/683161 I tried to delete symlink under /...
16
votes
2answers
14k views

What relationships tie ACL mask and standard group permission on a file?

At first I create a file and check it's standard permissions and ACL entries: $ touch file; ls -l file; getfacl file -rw-r--r-- 1 user user 0 Jul 30 16:26 file # file: file # owner: user # group: ...
1
vote
2answers
778 views

How to remove directory flags on linux?

I have a folder called "post", when I write getfacl post I get these results: # file: post # owner: www-data # group: ftpgroup # flags: -s- user::rwx group::rwx other::r-x default:user::rwx default:...
-2
votes
1answer
121 views

Linux giving permission to an user to the log file

Using SFTP I want to copy the log directory from var. By default my user have permission denied without sudo. Root is blocked for login, besides I don't want to use it in sftp. I want to give my ...
1
vote
1answer
306 views

Permission denied when accessing a file with acls on xfs file system

I'm trying to use ACLs with the xfs file system on Amazon Linux (RHEL-ish distribution). However, when I configure acls and try to access a file with a test user, my access is denied. I currently ...
1
vote
1answer
4k views

How do I mount an XFS partition enabling ACL?

I tried using: sudo mount -t xfs -o acl /dev/sdb1 /mnt/ssd I got: mount: wrong fs type, bad option, bad superblock on /dev/sdb1. BTW, I'm using Fedora 25.
2
votes
0answers
108 views

Need newly created files to inherit ownership

I have set up a Wordpress Server for my developers and it is working. However now when we copy over files to the /usr/share/nginx/html folder I am having permissions issues. I will try explain this ...
0
votes
1answer
470 views

Read only access to directory for specific users on AIX box

We are having user1 and user2 in AIX server (7100-04-05) and we need to give readonly access to path /data/web/tmp/* (they need to be able to read contents of files). With AIXC access list we can give ...