Questions tagged [acl]

ACL stands for access control list. ACLs extend permissions on files beyond the traditional user-group-others triple.

2
votes
0answers
295 views

How to get a user's effective permissions (traditional+acl) for a file/dir?

I've looked at other answers but can't find an answer for this. I have a file system which uses ACLs. I want to test what the resulting set of permissions (both traditional and ACLs) will be for a ...
3
votes
0answers
456 views

SSHFS mount option default_permissions does not support ACL's - please explain

In regard to the FUSE GitHub page, I have some questions: Does the quote below mean SSHFS does support ACL's if default_permissions is not used? Does it mean that if one needs ACL support and proper ...
0
votes
2answers
293 views

Do we have log for ACL ..?

I would like to know is there any way to list the ACL of particular user for all files. Example, for cronjob we have details in /var/spool/cron/. In the same way does ACL store the info anywhere?
1
vote
3answers
643 views

why setuid is set instead of giving privileges to others

Assuming the normal user wants to update his password at /etc/passwd. Why it is preferable to set Setuid in a way such as -rws------ . I am assuming it works the same as if the other users will be ...
0
votes
0answers
62 views

ACL: How to prevent specific user to access certain directory that is world-accessible?

I know that with the following command I could give a user the right read/write and enter a certain directory: setfacl -m u:user:rwx /dir/ I want to do quite the opposite in fact: The directory is ...
1
vote
1answer
50 views

What can I change with my nagios command so that it honors the destination folder ACL?

I have a nagios notifcation command that looks like this: /usr/bin/printf "%b" "NotificationType=$NOTIFICATIONTYPE$\nService=$SERVICEDESC$\nHost=$HOSTALIAS$\nAddress=$HOSTADDRESS$\nState=$...
1
vote
1answer
4k views

How do I mount an XFS partition enabling ACL?

I tried using: sudo mount -t xfs -o acl /dev/sdb1 /mnt/ssd I got: mount: wrong fs type, bad option, bad superblock on /dev/sdb1. BTW, I'm using Fedora 25.
3
votes
0answers
273 views

Copying files and folders to /var/www/html - inherit permissions of ./html

I want to enforce web server security and maintain 750 for folders and 640 for files - even when copying, at all times, under all circumstances. So far, I've got this working quite well. This is what ...
1
vote
1answer
293 views

Freebsd setfacl

I want on a dir,a default mask of --- for others on linux setfacl -d -m o:--- coldir/ works fine On Freebsd 11.0,with ufs2 setfacl -d -m other:--- coldir/ setfacl: other:---: Invalid argument ...
1
vote
0answers
52 views

C&C server strategies [closed]

We have around 30 Linux servers deployed at various client sites. There are 6 engineers working on these servers connecting remotely via SSH. All of these servers are connected with a central jumpbox ...
1
vote
1answer
348 views

Unable to explore sub-directory in Samba share with Linux ACLs

The basic problems is that I have a Domain Connected QNAP and want to publish the RSnapshot snapshots via Samba so users can recover their own files from backups. (As per the original RSnapshot HowTo: ...
1
vote
1answer
44 views

Files permission - problem with an exception to grant to specific user

As part of an exercice at my University, we need to do the following task: Respect the «least Privileges» rule. Create 5 users groups, each one has its own folder (G1 => Folder_G1) Grant user ...
2
votes
1answer
50 views

How to control the access to the directory?

help with the question. There is a server on CentOS 7, it has a bunch of users, each has its own projects. Some users have subprojects on which other users work, the structure is approximately this: / ...
2
votes
1answer
11k views

Operation not supported with setfacl?

This is a follow up question to this Q/A. I tried the command on my laptop it worked: setfacl -m 'u:programX:rwx' /etc/NetworkManager I checked that my embedded device had acl installed and marked ...
1
vote
1answer
127 views

How to retain ownership/permissions when using cloud backup (Backblaze B2)

I am using Ubuntu 16.04.3 and backing up some data from an ext4 partition to Backblaze B2 using the rclone tool. The issue I have is that when restoring these backups, I am able to download a ZIP ...
0
votes
1answer
539 views

Unable to write on directory that allowed by setfacl

I add permission to work on a directory as following: Udi> setfacl -R -m d:u:sami:rwx tmp Udi> getfacl tmp/ # file: tmp/ # owner: udi # group: udi # flags: -s- user::rwx group::r-x other::r-x ...
2
votes
0answers
155 views

StickyBits NFSv4 ACL to stop user movement of folders

Backstory: Client has a mixed environment of POSIX and NFSv4. The POSIX blows away the underlying NFSv4 ACL every-time they touch it or do anything with it. They say that users are able to take a ...
2
votes
1answer
286 views

How can I grant owning group permissions when POSIX ACLs are applied?

I am trying to understand how I can grant permissions to the owning group once POSIX ACLs have been applied to a file. Normally, I would use chmod g+rwx. However, that does not work when a POSIX ACL ...
2
votes
0answers
800 views

How to use ACL with SSHFS

I want to allow users in the same group ("team") to edit the same files on the server. The directory containing these files is mounted via SSHFS. So far, I was not able to accomplish my goal using ...
1
vote
0answers
296 views

FreeBSD permissions/ACL issue?

I'm a bit green with permissions/ACLs on FreeBSD 11, but this is puzzling me. root@svr: # su root@svr: # id uid=0(root) gid=0(wheel) groups=0(wheel) root@svr: ls -lt -rwxrwxr-x+ 1 root wheel 505 ...
0
votes
1answer
35 views

Allow access to a folder without access intermediary folders

I would like to know if it's possible to give read access to a folder within another folder where the user hasn't access. For example, a user needs to access all files within /folder1/folder2/folder3/...
1
vote
0answers
1k views

How to use NFS4_SETFACL to remove ONLY the GROUP@ ACL permission?

Currently, I have a file in NFS where it has the permissions, A::OWNER@:rwaDxtTcCy A::GROUP@:rwaDxtcy A::EVERYONE@:rwaDxtcy A:fdi:OWNER@:rwaDxtTcCy A:fdi:GROUP@:rxtcy A:fdi:EVERYONE@:tcy However, ...
1
vote
1answer
284 views

udisks2 - acl can't get write permissions for a regular user

External storage devices are successfully mounted to /run/media/myuser/ via udisks2 (udisksd service). I can read data from devices. However I can NOT write to them. I'm trying to edit directory ACLs ...
1
vote
1answer
548 views

Default permission not taken into account after setfacl

I'm trying to set default permissions so that all files created in my folder hackerank would be created with rwx by default. I've done a chmod g+s (as I was looking at different threads, not sure ...
1
vote
0answers
85 views

Ideal Linux ACL setup for ransomware

CAVEAT: This is mostly an intellectual exercise, since in case my user would get compromised, there is an entire cascade of events that could make this protection mechanism totally useless. ...
1
vote
0answers
29 views

Use ACL to harmonize permissions inside one folder

Me and a few of my friends can log on my server as, say: user vser wser ... They all have their private /home/user, but we wish to share another /home/fiesta folder, with anyone being able to do ...
5
votes
1answer
431 views

How can I make ACL settings on /run/media/* persistent?

I have various virtual machines running as guests on a Fedora 25 Workstation host. I store virtual disks (and all other personal stuff) on different separate partitions on a second built-in disk. virt-...
2
votes
0answers
104 views

Need newly created files to inherit ownership

I have set up a Wordpress Server for my developers and it is working. However now when we copy over files to the /usr/share/nginx/html folder I am having permissions issues. I will try explain this ...
0
votes
1answer
469 views

Cannot write after granting rwx permissions to group using an ACL

I have a user bob and he is a member of the group developers. I want all developers to be able to read, write and execute on the directory /home/testing and all sub-directories. The directory /home/...
9
votes
2answers
10k views

Difference between chmod vs ACL

I understand chmod and chown and how the permission bits work, but there is another permission system inside Linux, ACL with setfacl and getfacl, so this makes me wonder. What's the difference ...
0
votes
1answer
86 views

Solaris file permissions not inherited by OAG log files

OS: Oracle Solaris 11.3 SPARC Issue: I'm trying to inherit file permissions using ACL and it's partially working. For the files and directories I create on my own in the shell permissions are ...
1
vote
1answer
2k views

setfacl a whole directory containing assorted file types?

One of the study questions I'm doing is suggesting that I apply ACL's for the /root directory recursively for a regular user on the system. Obviously, this is bad security practice but it's just for ...
3
votes
2answers
215 views

How to get users to set ACLs on directories they don't own?

I have a set of storage directories on Linux machines, all 770/root:root (perms/owner:group), for which I use ACLs to manage users access. (I am unable to use unix groups as the directories are shared ...
2
votes
0answers
49 views

set ACL by NFS V4 IBM

I have the following directories and files: /project/ src/ test.txt temp.xls data/ data.xls The owner is always mytu and the Group is mytug. Now there is a user (e.g. user1) woh is ...
6
votes
1answer
665 views

How to Run Tunefs on Root Filesystem in FreeBSD?

I want to enable ACLs for a FreeBSD 11 system. According to the FreeBSD Handbook this can be done in two ways: By using a mount option -- mount -o acls By modifying a superblock -- tunefs -a enable ...
0
votes
1answer
92 views

Cannot view file even after ACL added

This is similar to another question, but it does not seem like it explains the behavior I'm seeing. Below I am adding a specific user to get rx permissions on the Apache log access logs. However, even ...
1
vote
0answers
123 views

Rsyslog and ACL

I'm redirecting log to /var/log with rsyslog, in order to let apache read the files, including new created files and directories i used ACL, in parent folder i did this : setfacl -d -m u:httpd24:rx ....
2
votes
3answers
1k views

ACLs - the same acl's on all newly created files automatically

I want to set ACL for eg. /tmp/test folder like this: /tmp/test owner is user "gaspar", member of group "testgroup". User "testuser" is also a member of group "testgroup", and I want to give rwx ...
4
votes
2answers
2k views

setting 'x' (executable) bit using ACL

I can't manage to set x bit to created file. archemar@foobar:~/D> echo echo hello world > v.sh archemar@foobar:~/D> ls -l v.sh -rw-rw-r--+ 1 archemar group1 17 Apr 12 08:12 v.sh no x-bit, ...
1
vote
1answer
23 views

Data accessible from other systems with the same UID?

Say I've got two dual-boot Linux systems on the same computer. Both share the same /home mount point. Amy, the only user on system 1, has a UID of 1000. She stored some files in /home/amy. Bill, the ...
5
votes
1answer
2k views

Precedence of ACLS when a user belongs to multiple groups

If a file has ACL entries for two groups, giving them different permissions, like this: group:admin:rw- group:staff:r-- what permissions does a user have if he belongs to both groups? Which entry ...
0
votes
1answer
547 views

ACL and LDAP configuration warning?

I have the following error happen when I try to use ldapsearch ldap_bind: Invalid credentials (49) I then see the following output when I debug using the slapd command for LDAP 58c1b1fa /etc/...
1
vote
2answers
112 views

Suse equivalent of Solaris' ls -V

using NFS in solaris result in (sort of) acl creation. by "sort of" I mean a peculiar command will reveal acl existence Solaris # mkdir T2 Solaris # getfacl T2 # file: T2 # owner: root # group: ...
2
votes
2answers
7k views

View extended ACL for a file with '+' in ls -l output

A file in a ls -l listing has permissions such as: -rw-r-----+ How do I find the extended Access Control List (ACL) permissions denoted by the +?
4
votes
1answer
497 views

ACL not honored by mv and tar

I'm trying to setup an area on my ext4 filesystem (on Debian Jessie), where all "staff" group members can read and write existing and newly created files. The filesystem is mounted with acl option: ...
2
votes
0answers
58 views

Defer based on recipient with exim

There are some recipient domains which have problematic delivery which is keeping the server tied up. Is there a way I can match certain recipient domains and defer/freeze messages to a given list of ...
0
votes
1answer
1k views

Force new files to have permissions 660 instead of 600?

There is a particular program that creates files and directories with permissions 600 and 700, respectively. It creates them within its own working directory, /home/me/program. I want those ...
3
votes
1answer
593 views

ACL File permissions for a group not working

I am running CentOS, where I have users in a chroot SFTP setup. They are chrooted to their home directories. These users belong to the group 'sftponlyusers'. I allow these users to upload to a ...
3
votes
3answers
905 views

Restrict user with sudo permission to access home folders

I have a linux development servers with some projects in home folders belonging to different users. Due to the nature of the server, some users can do sudo -s for some administrative task. Is there ...
1
vote
1answer
304 views

File system symbol on “+” (drwxr-x---+ 2 root root 4096 Jan 20 21:48 myusername)

What is the meaning of "+" in ls's output? There is a symbol behind drwxr-x---. The "+" is a new sign to me. I heard ACL (Access Control list). Does anyone know more about this? I saw it on my mount ...