Questions tagged [acl]

ACL stands for access control list. ACLs extend permissions on files beyond the traditional user-group-others triple.

4
votes
0answers
438 views

Does Samba 4 actually respect Unix file acls?

After researching the subject on the internet I drew a conclusion that Samba should take into account Unix file acls. During my tests I found the opposite. Only Unix file mode bits are respected, and ...
3
votes
0answers
456 views

SSHFS mount option default_permissions does not support ACL's - please explain

In regard to the FUSE GitHub page, I have some questions: Does the quote below mean SSHFS does support ACL's if default_permissions is not used? Does it mean that if one needs ACL support and proper ...
3
votes
0answers
273 views

Copying files and folders to /var/www/html - inherit permissions of ./html

I want to enforce web server security and maintain 750 for folders and 640 for files - even when copying, at all times, under all circumstances. So far, I've got this working quite well. This is what ...
3
votes
0answers
513 views

Filesystem-ACLs (setfacl) Equivalent to “mkdir -p” for recursive handling of ACLs

Following directory-structure is given drwx------ root root /path/to/must_be_accessible drwx------ root root /path/to/not_allowed1 drwx------ root root /path/to/not_allowed2 drwx------ root ...
3
votes
0answers
176 views

Git with multiple users on other systems using setfacl?

I'm setting up a git environment where multiple developers will work with per project. We have 1 server running git, and 2 separate servers, 1 live and 1 dev. On dev, I created a group and added the ...
3
votes
0answers
141 views

acl not overriding unix rights?

I have a folder with UNIX rights that forbid access to me : ls -l Sources-labo drwxrwxrw-+ 6 nobody applications 73728 févr. 25 13:25 Sources-labo groups users vault but the ACL are set so that ...
2
votes
0answers
30 views

ACL permissions mysteriously giving execute on group

I did the following and I don't understand the end result: $ mkdir mydir $ setfacl -d -m u::rwX,g::rwX,o::rX,m::rwx mydir $ touch mydir/test.txt $ getfacl mydir/test.txt # file: mydir/test.txt # ...
2
votes
0answers
295 views

How to get a user's effective permissions (traditional+acl) for a file/dir?

I've looked at other answers but can't find an answer for this. I have a file system which uses ACLs. I want to test what the resulting set of permissions (both traditional and ACLs) will be for a ...
2
votes
0answers
155 views

StickyBits NFSv4 ACL to stop user movement of folders

Backstory: Client has a mixed environment of POSIX and NFSv4. The POSIX blows away the underlying NFSv4 ACL every-time they touch it or do anything with it. They say that users are able to take a ...
2
votes
0answers
800 views

How to use ACL with SSHFS

I want to allow users in the same group ("team") to edit the same files on the server. The directory containing these files is mounted via SSHFS. So far, I was not able to accomplish my goal using ...
2
votes
0answers
104 views

Need newly created files to inherit ownership

I have set up a Wordpress Server for my developers and it is working. However now when we copy over files to the /usr/share/nginx/html folder I am having permissions issues. I will try explain this ...
2
votes
0answers
49 views

set ACL by NFS V4 IBM

I have the following directories and files: /project/ src/ test.txt temp.xls data/ data.xls The owner is always mytu and the Group is mytug. Now there is a user (e.g. user1) woh is ...
2
votes
0answers
58 views

Defer based on recipient with exim

There are some recipient domains which have problematic delivery which is keeping the server tied up. Is there a way I can match certain recipient domains and defer/freeze messages to a given list of ...
2
votes
0answers
457 views

Setfacl permissions ignored for file copied over sftp

I have set the permissions for the /var/www/html directory in my Raspberry Pi like this: # file: . # owner: www-data # group: www-data user::rwx group::rwx other::r-x default:user::rwx default:group::...
2
votes
0answers
551 views

Converting POSIX ACL to NFSv4 ACL

We are facing data migrating from nfsv3 to nfsv4. We set POSIX ACL for some folders and files on nfsv3 by using setfacl which are exporting from Linux box as a nfs server. Now we are going to ...
2
votes
0answers
76 views

How do I specify a relative change to ACL of current user/group?

I have a directory that already might have some subdirectory configured rwx for www-data, but I want to make a final pass and ensure www-data has a full read access on the full directory. All these ...
2
votes
0answers
403 views

How to set ACL on a USB-device

I'm new to acl's so this is blackmagic to me. But what I have is a camera that I want to talk to. So I got a netbooted debian machine: ulf@term13:~(0)$ lsb_release -a No LSB modules are available. ...
2
votes
0answers
192 views

What is the effect of ACLs/umask on the permissions of the executable file generated by gcc?

I have been wondering how gcc determines the resulting file permissions of the executable file being generated. To gain some insight, I considered a minimalistic program test.c #include <fcntl.h&...
2
votes
0answers
577 views

Cross-NFS file move adds ACL

Moving a file from one NFS4 mount to another adds an ACL. The reason, if I understand the process correctly, is that mv queries the system.nfs4_acl extended attribute of the source file, and uses the ...
2
votes
0answers
2k views

Samba 4.1.9 returning “access denied” trying to change share perms from Win client

UPDATE: version mismatch seemed to stop happening for some reason, although not sure why/at what point. Have a "public" (within LAN...like this) read-write share on a CentOS 6.4 box running, ...
2
votes
0answers
2k views

CentOS 6.5 sound permissions

I am trying to configure ALSA for a CentOS 6.5 minimal install, my problem is non-root users do not have permission to access the sound devices in /dev/snd because the files are missing access control ...
2
votes
0answers
433 views

New files getting wrong permissions from setacl

I'm trying to create a file from windows on a mapped samba share, but after creating the file, I'm unable to edit it. For some reason the mask is changing to rw- even though my default is set to rwx. ...
1
vote
0answers
72 views

Does Access Control lists override group or owner permissions?

I came across the following task: Add 3 new users - alice, bob, charles Create a new group - marketing - and add alice, bob and charles to that group Create a directory - /marketing - whose owner ...
1
vote
0answers
56 views

Do ACL permissions differentiate between UNIX file types?

When setting ACL permissions such as sudo setfacl -Rdm g:shared_group:rwx /mnt/shared_resource do the permissions of shared_group extent to every type of file (directory, symlink, regular file, ...
1
vote
0answers
24 views

Network share permissions

I try to reproduce this: 6 users involved: Ann, Betty, Charls, Danny, Edward, Fred 1 share: SHARE 3 folders: Optional, Personal, Questions SHARE (only those 6 can read) |_Optional (only Ann and ...
1
vote
0answers
32 views

Cannot use ACL to give user write permissions, is ACL enabled?

On a RedHat 6.9 server I have a folder named "/Data", permissions are: drwxrwxr-x 20 root root 4.0K Apr 24 2018 Data I want to add a user via ACL to have write permission on this folder for ...
1
vote
0answers
296 views

FreeBSD permissions/ACL issue?

I'm a bit green with permissions/ACLs on FreeBSD 11, but this is puzzling me. root@svr: # su root@svr: # id uid=0(root) gid=0(wheel) groups=0(wheel) root@svr: ls -lt -rwxrwxr-x+ 1 root wheel 505 ...
1
vote
0answers
1k views

How to use NFS4_SETFACL to remove ONLY the GROUP@ ACL permission?

Currently, I have a file in NFS where it has the permissions, A::OWNER@:rwaDxtTcCy A::GROUP@:rwaDxtcy A::EVERYONE@:rwaDxtcy A:fdi:OWNER@:rwaDxtTcCy A:fdi:GROUP@:rxtcy A:fdi:EVERYONE@:tcy However, ...
1
vote
0answers
85 views

Ideal Linux ACL setup for ransomware

CAVEAT: This is mostly an intellectual exercise, since in case my user would get compromised, there is an entire cascade of events that could make this protection mechanism totally useless. ...
1
vote
0answers
29 views

Use ACL to harmonize permissions inside one folder

Me and a few of my friends can log on my server as, say: user vser wser ... They all have their private /home/user, but we wish to share another /home/fiesta folder, with anyone being able to do ...
1
vote
0answers
123 views

Rsyslog and ACL

I'm redirecting log to /var/log with rsyslog, in order to let apache read the files, including new created files and directories i used ACL, in parent folder i did this : setfacl -d -m u:httpd24:rx ....
1
vote
0answers
514 views

NFSv4 ACL failure

I try to share NFSv4 from ubunto 12.04, (installed package nfs4-acl-tools) - this is my server: /export/NewShareName *(rw,insecure,async,no_subtree_check,no_root_squash,fsid=c7f7fca9-842b-80fe-bc7f-...
1
vote
0answers
158 views

let rm truncate files

A friend of mine has one directory (/var/mail) on his Linux machine where rm seems to truncate files if he has no write permissions on the directory. I like this feature and wonder how could I do the ...
1
vote
0answers
109 views

Set static permissions on shared folders

I have a folder I use for Steam games, and it's shared between Linux and Windows systems. I have this problem that if Windows system has accessed the folder it changes the permissions, locking out ...
1
vote
0answers
143 views

Where can I find an “Access Mask Format” for POSIX and ACL permissions in Linux?

I was looking at NTFS file permissions yesterday, and they have an Access Mask Format for their low level permissions and it's stored in an enumeration in binary, which got me wondering about if there ...
1
vote
0answers
1k views

File acls (setfacl) not working how I would expect them to

I have a basic SFTP server setup using OpenSSH. To setup the SFTP server, I followed these steps: Step 1: I installed the OpenSSH package. sudo apt-get install openssh-server -y Step 2: Created ...
1
vote
0answers
61 views

Inheriting permissions with ACLS

I've trying to set up a CVS repository using ACL's (setfacl) and having trouble getting permissions to inherit properly. Namely, when a user commits to the repository, I want the file to inherit the ...
1
vote
0answers
321 views

When using linux acl mkdir and mkdir -p do different things

I have a directory bar: # file: bar/ # owner: root # group: root user::rwx user:little-jonny:rwx group::r-x mask::rwx other::r-x default:user::rwx default:user:little-jonny:rwx default:group::r-x ...
1
vote
0answers
615 views

Is it possible to change file permissions when copying

I have a directory with default ACL permissions that get copied to all files created in that directory, but only if they are created in that directory. Would it be possible to change the permissions ...
1
vote
0answers
82 views

ACL doesn't always get inherited

Solaris platform. why is it that "sometimes" a file copied into a directory that has a default ACL attribute does not inherit that ACL? Other times it does.
1
vote
0answers
83 views

OS X: Apply inheritable ACL permissions to pre-existing subfolders and files

I have a folder with numerous ACL permissions set. Most of these include file_inherit and directory_inherit permissions and therefore should be, and are, automatically propagated to any new sub-...
1
vote
0answers
23 views

How can I cause cvs update to use the destination folder's default posix acl mask?

I have a directory and file with these permissions: # file: blue/ # owner: user-a # group: group-a user::rwx user:user-b:rwx group::rwx mask::rwx other::r-x default:user::rwx default:user:user-b:rwx ...
1
vote
0answers
33 views

Problem using Access control lists for new users, ex ( afolder created in skel directoy have acl set, it should apply to new users)

I have a doubt regarding ACL I want to give permissions to a group using ACL A directory created in SKEL directory needs to have a default ACL set that allows the members of the group “linux” to ...
1
vote
0answers
134 views

Copying files to a directory shared via ACL doesn't get default mask

I'm trying to setup a simple shared directory on an ext4 filesystem for a group of users to work on. Let's say I just need to give all permissions to all users belonging to the group "workgroup" to ...
1
vote
0answers
55 views

What forms of discretionary access control are there?

I know it's kind of an unguided question, but just so I have a broader sense of how things are I was interested in getting a reasonably complete list of discretionary access controls available on Unix ...
1
vote
0answers
2k views

Windows domain account can't create files via samba share, but can do this in linux shell, why?

I'm migrating tomcat server from windows to linux (CentOS 6.3 64bit), and want to use samba to share tomcat directory to technical department staffs (windows domain users) with read+write rights. I'...
0
votes
0answers
37 views

User can cd but can't ls directory

This directory had ACL and UNIX permissions set on it. I've reset the directory's UNIX and ACL to the minimum, but the user cannot list the contents. Other users with similar group memberships CAN ...
0
votes
0answers
21 views

Hide folder that user uses currently

I'm searching for a ftp server or any idea to achieve hiding folder from others when somebody is working in it. For example: I have 3 folders: A B C when I working in A, anybody who is also connected ...
0
votes
0answers
12 views

ACL: Wrong owner & group after mounting

I try mounting the filesystem of our NAS on my Linux machine. I mounted the filesystem from the share with my username: sudo mount -t cifs -o user=username,sec=ntlmv2i //share /run/media/user/...
0
votes
0answers
26 views

Better use ACL or Capability to let users start a service?

My question is openned to other propositions too. An install sequence puts a binary in the directories (say bin1 in PATH_TO_BIN1). It configures a service in /etc/init.d The service has to be ...