I have a directory called /test it there are two files:
I want to grant read-only access to user john and did the following:
setfacl -m u:john: r test/
With the above command john can not access the folder because he lacks the execute permission, so I tried again with this:
setfacl -m u:john: rx test/
Ok, it works now: user john is able to access the folder and read the files.
However, he can run script.sh. The latter power I did not intend to grant. How should I proceed?