Questions tagged [setfacl]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
0 answers
16 views

How to set ACL permissions for SSH_AUTH_SOCK in a RemoteCommand?

I'm trying to forward my SSH agent and then grant permissions to the SSH_AUTH socket. The permissions are for another user on the remote host. My ssh config: Host myhost Hostname 1.1.1.1 ...
dimid's user avatar
  • 627
1 vote
0 answers
20 views

ACL always sets group execute permissions on files (Samba)

I have some users in the "sambashare" group and some in the "sambashareAdmin" group. Only users from the "sambashareAdmin" group are alowed to change/create stuff. All ...
MrGlasspoole's user avatar
0 votes
0 answers
25 views

Setfacl not working only one file

I have set a face for the SSL folder in the Rocky Linux distro. The folder has default rx for my custom user. But when new SSL & key files are created. Certificate files have proper rights, but ...
doraemon's user avatar
  • 111
0 votes
0 answers
89 views

the result of "setfacl --modify" will get reverted after a reboot

A docker, when run for the 1st time, won't do so: $ docker-compose -f docker-compose.local.yml up -d permission denied while trying to connect to the Docker daemon socket at unix:///var/run/docker....
nicholas.fowler's user avatar
0 votes
1 answer
49 views

linux ls -l ACL +, . , gap How to make gap

drwxr-xr-x+ 4 root root 4096 Sep 21 04:00 test << + drwxrwxrwt. 10 root root 250 Sep 21 04:03 tmp drwxr-xr-x. 12 root root 144 Sep 19 03:42 usr << . drwxr-xr-x. 20 root ...
박용원's user avatar
0 votes
0 answers
64 views

Misunderstanding about linux permisions, groups

Recently i have desided to create autobackups from my host to a little backup server by using ssh + rsync. I have created separate user for this task "backuppc", have created "shared ...
One's user avatar
  • 13
0 votes
1 answer
70 views

How can I give another user read/write access to a specific sub folder and the ability to ls the tree but only for the folder they have access to?

I have a user user1 that has a bunch of folders in their home directory, including /home/user1/data/special/files. I have another user user2. I want: user2 to be able to read/write files/folders in /...
IMTheNachoMan's user avatar
1 vote
1 answer
457 views

How to setfacl on a directory and all its parents?

Let's say we have the following directory structure a b1 c1 c2 b2 c3 c4 And I want to use setfacl to give a user frank access to c1, I can do something like setfacl -m u:frank:rX ...
DrizzleX's user avatar
  • 125
0 votes
0 answers
84 views

Setfacl in folders working but in files don't work correctly

I have a file server running Samba 4.9 in Debian 11 the share folders is working. I used setfacl for subgroups, so i had conclusion was confused and not working. So i used setfacl for each user, in ...
José Ricardo Ganiko's user avatar
1 vote
1 answer
84 views

Reverse setfacl without sudo or root

I have used command sudo setfacl -R -m u:ubuntu:rwx .. Unfortunately, by mistake on root directory, stopped it in a middle, but to late. I hoped to revere it by using sudo setfacl -bR / however now ...
Leszek J.'s user avatar
0 votes
0 answers
68 views

Restrict access to web directory using acl

The requirement is to allow a specific user (e.g. someuser) full access to a directory (e.g. /var/www/html/someproject) via SSH/SFTP, but not allow browsing anywhere else. Is it possible using only ...
Arn's user avatar
  • 1
0 votes
1 answer
191 views

Accessing a file in another users home directory using setfacl

I was trying to access a file on another users home directory using acl. I have tried to do it the following way. User k9 made a file test.file and ran setfacl -m u:sai:rwx test.file. Following is ...
gst1502's user avatar
  • 101
1 vote
0 answers
42 views

Permission Error

I have installed bash shell in windows 10 to run linux commands. I am trying to execute a script which gives error "You do not have permission to edit". I have executed command "chmod ...
harpreet's user avatar
0 votes
1 answer
459 views

How to restrict read access to directory for specific user in centos?

So here is the deal, I create directory /home/accounting, I have users donna and mike and I want to restrict read privileges for them to this directory. After going to Google I was able to find how to ...
Sydnel's user avatar
  • 1
3 votes
1 answer
70 views

ls throws errors when trying to access directory guarded with ACL

I have setup a directory and some files with setfacl. jobq@workstation:~/Pool$ getfacl /etc/jobq getfacl: Removing leading '/' from absolute path names # file: etc/jobq # owner: root # group: jobq ...
infinitezero's user avatar
1 vote
1 answer
497 views

setfacl -m works but setfacl -x does not work

I have the following code in a bash file: sudo setfacl -m g:jobq:x /usr/local/sbin/jobq_submit sudo setfacl -m g:jobq:x /usr/local/sbin/jobq_server sudo setfacl -m g:jobq:x /usr/local/sbin/...
infinitezero's user avatar
1 vote
0 answers
126 views

Create a folder which can be written to but not read

I've been going over content I previously used in Uni to learn Linux, as I have gotten rusty and thought a refresher would be helpful. The content is hosted on a site similiar to Hack the Box which is ...
LackyWacky's user avatar
0 votes
1 answer
71 views

How do you read all the ACLs on a particular host and change the name of a group when present?

I am trying to read all of the ACLs on a particular host using the following command: getfacl -R / What I want to do is look for groupA in each ACL and if groupA is present, change it to groupB, ...
ImACarrot's user avatar
0 votes
0 answers
155 views

How to go through every file and directory on server and change group ownership?

The goal is to loop through every file on the server, check if each file or dir has the 'groupA' group in the permissions. If the 'groupA' group is in the permissions, change it to 'groupB'. Otherwise ...
ImACarrot's user avatar
0 votes
3 answers
133 views

How to force set (not subtract) permissions to future files?

I have a program on Ubuntu Linux that creates a logs/error.log file with a permissions 660 (rw-rw----) or 640 (rw-r-----). But I want the file permissions always to be 666 (rw-rw-rw-) (including when ...
Mihail H.'s user avatar
  • 105
0 votes
1 answer
49 views

No more ssh access after setting read only access to a user on my linux server

I just added a user on my linux server and tried to set read only access to this new one. In the process, I wrongly entered a command to set user's rx access on / setfacl -R -m u:user:rx / and now, I ...
Pierre's user avatar
  • 1
1 vote
0 answers
122 views

Setting ACLs for directories that don't exist (yet)

Can I set ACLs for directories which don't exist yet, but follow a pattern? I have a directory /opt/myapp/var where all sub-directories and files should be owned by mygroup and should be group ...
Stewart's user avatar
  • 13.6k
0 votes
3 answers
2k views

Directory listing when using setfacl ACL

I use setfacl command to grant read permission for reading files in directory, but I cant use ls to view files. I tried setfacl -Rdm g:grouptoadd:rx /path/directory/ but, I can read files (when I use ...
grU's user avatar
  • 11
0 votes
2 answers
558 views

Can't chmod a Windows mounted folder in Ubuntu 20.04

So I am running Ubuntu 20.04 on a virtual machine inside Windows 10. A program on Ubuntu needs to have read and write permissions for a folder I mounted via VirtualBox, so I decided to try to chmod ...
botnewb's user avatar
2 votes
1 answer
702 views

How do I set different default permissions for files vs folders using setfacl?

I have a folder /stuff that is owned by root:stuff with setgid set so all new folders' have group set to stuff. I want it so: New files have rw-rw----: User: read and write Group: read and write ...
IMTheNachoMan's user avatar
0 votes
1 answer
34 views

Access control lists and permission on directory or folder

I have user bala-sftp. Evertime the user writes a file to folder /balab/settlement/report currently it is -rw-rw-r-- 1 bala-sftp sftponly 5295 Oct 18 19:00 settlementreport_switch_20201018.csv ...
BalaB's user avatar
  • 157
1 vote
1 answer
1k views

How do I jail a user in /var/www/html?

I would like to restrict a user (user sftp-user, group webgroup) to sftp access for the /var/www/html directory in CentOS 8. They should have read and write permissions so they can make changes to ...
location's user avatar
1 vote
1 answer
1k views

User has no effective access when using setfacl -d

I have a directory that I would like to share with two specific users. It has no contents yet, but I need all three of us to be able to add files and subdirectories, and it's important that all ...
Alexander Brooks's user avatar
0 votes
1 answer
779 views

setfacl doesn't apply permissions recursively

On my RHEL 7.7 system, I am trying to allow user foo read and execute (no write) to everything under the /var/log/ directory, to include files, sub-directories, and files within those sub-directories. ...
user2661503's user avatar
2 votes
0 answers
85 views

How to set correct ACL to website users?

I'm trying to set correct ACL to all folders used on my shared server. That way other users will be unable to read each other files. What I did so far is next: Owner of each website folder is owned ...
user134969's user avatar
2 votes
4 answers
1k views

facl, setfacl, directory share, why does cp put the original file permissions into facl mask? Shouldn't that be cp -p behavior?

The users on this system are careful and have their umasks set to the very private 0077. However, the users would like to have group specific directories, where files may be copied so as to ...
user avatar
0 votes
1 answer
653 views

Change owner to a file when saved in a specific folder

I have a NAS with a directory for each member of my house. My user name, is member of each member's group. So I have access to folders of all users. I want, when I place a file, inside a user's ...
Chameleon's user avatar
  • 103
1 vote
1 answer
2k views

setting correct default permissions on directories and files created by sftp user in same group

In my folder /var/www/storage/app/uploads/public I have a lot of subdirectories that are made by my website CMS and sftpupload script from a remote server. Now the problem I'm facing arises from the ...
Tschallacka's user avatar
3 votes
0 answers
1k views

Setfacl set permissions for future files and directories recursively

I have a directory a directory with permissions as below: drwxrwxr-x 5 myuser mygroup 4.0K Mar 12 19:54 log I have an application which regularly creates directories inside the folder and writes ...
letsc's user avatar
  • 131
3 votes
0 answers
3k views

Using setfacl to set group=rwx, other=r-- of directory works using git and making subdirectories, but not when I create a text file?

I have a directory: /usr/local/test/ And I have changed the group of the test dir to bfx: $ sudo chgrp bfx /usr/local/test/ And used a stickybit to make the group remain the same in all files/...
trouselife's user avatar
0 votes
2 answers
883 views

setfacl -R doesn't work on Cygwin

I want to change the ACL and the default ACL for all directories and files in a base directory. In other answers (such as this one), the -R flag is used. However, I get $ setfacl -R -m u::rwx my_dir/ ...
bballdave025's user avatar
-1 votes
1 answer
844 views

why doesn't setfacl give executable permission?

I ran sudo setfacl -d -m g::rwx /tmp then went into /tmp and created a file and looked at its permissions: -rw-rw-rw-. 1 jm wheel 0 Aug 24 10:26 test_file then I ran sudo chmod g+rwx ...
MetaStack's user avatar
  • 381
2 votes
1 answer
12k views

Remove User from ACLs for a specific Directory

CentOS release 5.10. getfacl --omit-header Shared/ user::rws user:foo:rw group::rw mask:rw I want to remove user:foo:rw from this entry. setfacl -m user:foo:0 simply removes permissions. getfacl --...
Evocati's user avatar
  • 23
0 votes
0 answers
322 views

How to set ACLs so a user can control any dir content, but not the dir itself and not file permissions?

I'm using FreeBSD and ZFS (I think FreeNAS uses NFSv4 ACLs). I want to grant access to a group of users (group name: publicfiles_rw_users) and allow them to modify, create, and delete all files and ...
Stilez's user avatar
  • 1,231
1 vote
2 answers
2k views

Unable to remove or change files after setfacl rwx-command

With root-user, I've executed this command: setfacl -R -d -m u:MYUSER:rwx /myfolder When I then change to that user ( su MYUSER ) and try to remove a file ( rm /myfolder/somefile.sql then I get the ...
Zeth's user avatar
  • 155
2 votes
1 answer
73 views

Grant access for user to folder (even files created after permission is granted)

I have created a backup-user (let's just call it jeremy) on an Ubuntu-server. Then I've created a backup-dir, containing files from several different servers: /backup | |--server1 | |--...
Zeth's user avatar
  • 155
1 vote
1 answer
545 views

How to stop setfacl from making my directory writable for group?

I have a group called webdev and I want only the root and the memebers of the group webdev to have write access on the directory /web. Now, Here's the problem: # chmod -R u=rwX,go=rX /web # ls -l /...
Somenath Sinha's user avatar
2 votes
1 answer
3k views

Nfs4_setfacl reports error on files of mounted folder

I mounted an nfsv4 folder (both client and server are CentOS 7.4) via command $ sudo mount -t nfs -o v4.0,sec=krb5 ark-centos7-ker.qa.arkivio.com:/export/nfs1 /nfs4-mnt-dir created a file via: ...
xq10907's user avatar
  • 95
1 vote
1 answer
690 views

Freebsd setfacl

I want on a dir,a default mask of --- for others on linux setfacl -d -m o:--- coldir/ works fine On Freebsd 11.0,with ufs2 setfacl -d -m other:--- coldir/ setfacl: other:---: Invalid argument ...
elbarna's user avatar
  • 12.6k