Questions tagged [acl]
An access control list (ACL) is a list attached to a file or other resource, specifying what may be done with it and who may do it.
79
questions
0
votes
1
answer
25
views
Two system services need write access to the same directory - How to correctly set users/groups etc to permit access securely?
I am trying to run two system services, each of which has its own user, and creates files owned by that user, in a directory under /var/lib - The problem is that I need both services to write their ...
- 33
-1
votes
1
answer
33
views
virtual environment and/or acl?
I was wondering if there is another method from access control on a folder to execute a file. I thought of something like a password protected virtual environment and only when accessing the virtual ...
- 1
0
votes
0
answers
20
views
Fine-grained permissions for mixed folder access between 3 users
I'm using a group to share home folders across two users, the users under consideration are:
user1:groupA
user2:groupA
user03:user03group
user99:user99group
and their home folders have setgid so that ...
- 3,020
0
votes
2
answers
72
views
Add directory before word contain extension .txt
I have a file named acl.txt
acl test1 dstdomain web.txt
acl test2 dstdom_regex domain.txt
acl test3 dstdomain .facebook.com
http_access deny test1
http_access deny test2
http_access deny test3
This ...
- 13
0
votes
1
answer
356
views
Please help me understand effect on file permissions on combining umask an ACL and Samba create mask
I set up an ACL in /media/4TB1
My intention is to enforce these two points:
All sub-directories of /media/4TB1 will have permissions: drwxrwxr-x i.e: chmod 775
All files will get permissions: -rw-rw-...
- 191
0
votes
1
answer
368
views
setfacl broke my ubuntu installation
I'm not 100% sure but I think I ran setfacl with the wrong argument and changed acl stuff for everything under(non recursively?) '/' instead of './' , immediately half the applications I had running ...
- 51
1
vote
0
answers
592
views
Issues with arduino, /dev/ttyACM0 and ACLs? (maybe)
like many people I seem to be having an issue when trying to connect my Arduino uno to the Arduino IDE in ubuntu but it seems to go beyond the usual issues that people have. I am receiving the classic ...
- 11
0
votes
1
answer
415
views
glusterfs CTDB Samba - Windows permissions ACLs
I have a testsetup consisting of two (three) nodes, 1 brick and a testshare.
The files are replicating and I see the files in every node. I set up CTDB and added the cluster to the Active Directory. ...
- 121
0
votes
0
answers
39
views
After updating to Ubuntu 20.04.2 LTS. Access 2016 tables stored on the server are behaving strangely
I have a microsoft access table backend stored on the server and 4 users on windows desktops logging into database with the tables being used as link tables.
This has been running since 14.4 upgrade ...
- 21
0
votes
0
answers
250
views
Noacl mount option has no effect. Trying to let all users write to ext4 on USB drive by default
When I click on a USB drive filesystem in Files to mount it, this mounts it to /media/$USER/label. This lets my user read/write to the drive if it's NTFS or FAT32, but fails to let my user read/write ...
1
vote
0
answers
63
views
Why does ACL have permission restrictions?
I am using the dropbox client on my ubuntu. I have a need for user www-data to be able to create files inside folders created by user dropbox. I configured using ACLs to inherit permissions rwx for ...
- 11
1
vote
1
answer
586
views
Cannot edit file via group permission
there's a system with two users: codera and coderb.
They both belong to group named firma.
However, when one of them creates a file (in /tmp) and changes it's group ownership
to firma, with rw group ...
2
votes
0
answers
1k
views
Samba share setting permissions on Windows fails
I have set up a samba4 ADC by the TecMint tutorial, Create a Shared Directory on Samba AD DC and Map to Windows/Linux Clients – Part 7, on Ubuntu 16.04.
It works well but when coming to configure the ...
- 71
0
votes
1
answer
202
views
Set default permissions of files for a folder even if not created in folder
Version: 20.04 LTS
How can I force all files inside a folder to have a default set of permissions regardless of if they were created there or not? I've viewed and tried different answers mostly with ...
- 11
0
votes
1
answer
2k
views
Squid on Ubuntu 20.04 installation problem, acl command not found
I'm new to Linux so please be patient with me.
I am following this guide on phoenixnap.com to set up squid.
Squid successfully installed & is running.
However, acl localnet src 192.168.0.15, or ...
0
votes
0
answers
236
views
LXD: Imported container doesn't start - Problem with ACLs
I am just trying to launch a container, which was created on an other machine.
I've done this the following way:
$ lxc snapshot container_name snapshot_name
$ lxc publish container_name/...
- 1
0
votes
1
answer
709
views
Permission denied for transmission daemon event
I bit my teeth on this problem: I'm trying to set up transmission-daemon with an incomplete and done directory.
Downloading to incomplete does work fine, but for the done directory I receive a ...
- 1,151
0
votes
1
answer
1k
views
ACL not working in ubuntu 16.04, ext3?
I'm new to ACL's in linux (but aware of them from windows), and am trying to set up write access (for mr_green) to a folder in a different user's home folder (mr_blue). What happens is that mr_green ...
- 195
2
votes
0
answers
87
views
How to unify two sets of permissions/ownership on a folder?
I have a VirtualBox VM running Ubuntu 16.04 LTS. VirtualBox is able to share a folder with my host. It configures its permissions as follows:
$ stat /home/tiqvah/cam
File: /home/tiqvah/cam
Size:...
1
vote
0
answers
401
views
SETFACL to not go out of /home
So I've been testing ACL's in Linux and they work as intended. I have, for example, this folder where I've stablished permissions for users belonging to the gruop share. So far, so good...
lucas@...
- 413
1
vote
0
answers
278
views
Can't set acl recursively in Ubuntu 18.04
I'm trying to use acl to be able to modify files without changing ownership of the files, but acl is throwing an error (I'm guessing it's my syntax).
This is on a new server running Ubuntu 18.04. I'...
3
votes
2
answers
1k
views
Default folder/file created ACL permissions not correct
I have applied the following settings to my core html folder:
chown :ftpaccess html -R
chmod 0775 html -R
setfacl -R -d -m group:ftpaccess:rwx html
However whenever anyone creates a new file or ...
- 91
4
votes
2
answers
19k
views
How to grant non-root user access only to /var/log directory
I have newly created non-root(normal) user and want to grant access only to /var/log directory so that the user can view and monitor the logs. The user should not be able to cd/ls or access the /etc ...
- 41
1
vote
1
answer
48
views
Execute Bit For Folders But Not Files
I have a folder called Movies with sub-folders called Movie1, Movie2 etc, and then the movie inside of that sub-directory. Example below:
Movies:
Movie1
film.whatever1
Movie2
film....
- 2,913
1
vote
0
answers
183
views
ACLs Permission denied
Assume this is the permission I set to file.sh
$ getfacl file.sh
# file: file.sh
# owner: ubuntu
# group: ubuntu
user::rwx
user:test:r-x #effective:--x
group::r-x #effective:--x
...
- 111
1
vote
1
answer
2k
views
How can I disable ACL on ext4 filesystem? [duplicate]
I'd like to disable ACL in /etc/fstab when mount. How can I do that?
- 361
0
votes
0
answers
300
views
getfacl returns rwx, but I have a "permission denied" when trying to access the said folder
I'm trying to execute a script from Server A with user "vbackup" to copy some files from server B to server A.
On server A, I did
setfacl -Rdm user:vbackup:rwx /var/atlassian/
On server B, I run ...
- 103
1
vote
0
answers
138
views
How to make folders invisible to certain users
I use a Samba share pointing to a directory with all my files. As several users access the same share and I don't want every user accessing every folder, I use ACL to restrict them. Is there any way ...
- 2,321
1
vote
0
answers
61
views
Setting default permissions for all new dirs/files in a dir and its subdirs, no matter who creates them
I have a directory, and I want all directories created in this directory, or its sub dirs, to be 777 and all files created in it or any of its subdirectories to be 666. It doesn't matter which user ...
- 816
0
votes
1
answer
307
views
Trouble creating an accessible Samba share on a separate data partition
I am attempting to create a standalone Samba file server with user-level security for shared directories residing on a separate data partition. The problem is that some users cannot access shares on ...
- 449
2
votes
1
answer
413
views
Is it possible to keep setgid bit when unzipping files as non-root user?
I have a folder with the following permissions:
drwxrws--x+ 13 myuser www-data 4096 Mar 20 09:57 project-folder
In this folder I have an archive archive.zip with the following permissions:
-...
- 21
4
votes
1
answer
890
views
Discrepancy with the output of `ls -al` and `getfacl`
I have run the following script to set permissions into /etc/nginx
#!/usr/bin/env bash
sudo chown -R root:root /etc/nginx
sudo chmod -R 0750 /etc/nginx
sudo setfacl -Rbk -m g:hugo:rwx /etc/nginx
...
- 3,237
0
votes
1
answer
2k
views
How to make new directories inherit their parent's ACL?
I have set default permissions for new files and groups in my directory like this
sudo setfacl -d -m g::rwX /<directory>
It works great.
The problem is, that if I create any new files or ...
- 816
0
votes
1
answer
681
views
Website blocking issue in squid3 on ubuntu 12.04 [closed]
I am trying to block some websites on my ubuntu 12.04 with Squid 3.1.19. Following is a view of my ACL's.`
Denying domains based on defind access list
acl ym dstdomain .yahoo.com microsoft.com ...
0
votes
1
answer
4k
views
Set default ACL for new files and directories?
I have two users usera and userb and a folder Both to which I am trying to set the ACL so that both users can create, update, delete any file or folder within that folder Both. The problem is that if ...
- 2,321
1
vote
0
answers
287
views
Give File Permission for modify in samba sharing but only owner can delete file
I need help regarding file permission in samba sharing,
Is it possible to set an excel file in samba sharing (windows clients) can be modified by group but only can be deleted by owner? I did follow ...
- 11
2
votes
0
answers
291
views
Access Control List when running script from crontab
hoping someone has come across this before,
I am using ACLs to allow one user (user1) to write files into a location in another user's home directory (user2). For manual usage, this is working as ...
user759170
2
votes
1
answer
1k
views
Why does ls show wrong permissions for the group when using ACL?
I have the following script for setting permissions for the Joomla CMS directory:
#!/bin/bash
if [ ! -d "$1" ]; then
echo "Error: Folder does not exist or no folder given."
echo ""
exit 1
fi
# ...
- 148
0
votes
0
answers
105
views
Safest file permissions for samba access
I have set a samba user (say, remoteuser) who is supposed to manipulate files under some system folders on the samba server (i.e. and not only his home directory's files), such as e.g. /etc/somedir)
...
- 1,981
0
votes
1
answer
248
views
unable to write in a directory by ACL users granted with write permission
I have two directories
/home/user1/htdocs/
/home/user2/htdocs/
I have provided permission to www-data using:
chown -R www-data:www-data /home/user1/htdocs/
chmod -R 755 /home/user1/htdocs/
...
- 170
4
votes
2
answers
4k
views
Package "acl" on Ubuntu 16.04
I am reading this Digital Ocean tutorial. In step 1, it says:
We'll need [...] acl to set the right directory permissions when installing the
application
I wanted to check if acl is already ...
- 329
1
vote
1
answer
603
views
(Another!) question about www-data privileges and root - but with a twist
In short : is it safe to grant root (user) access to www-data?
Longer statement : as a lot of questions asked on this using chmod g+s, POSIX ACLs and other sites umask as to the appropriate way of ...
- 133
0
votes
1
answer
87
views
Block a user with acl
How can I block one user and grant access to another user using an ACL?
I tried setfacl -Rdm u:maria: /home/elena but I think this is wrong.
maria is one user and elena is another user.
- 1
1
vote
1
answer
321
views
confused with shared folders and ACL
I have 2 ubuntu machines (ubuntu1 and ubuntu2). Ubuntu1 shares folder /opt/share and i've created testuser specifically to rwx:
setfacl -Rm u:testuser:rwx .
Ubuntu2 mounts it on /mnt/ubuntu1
mount -...
- 111
6
votes
1
answer
2k
views
Why can't I delete or move these files without sudo?
I had used file-roller to extract an ISO image to my Desktop earlier, but now I can not delete or move/rename those files any more "as myself", only with sudo. Changing permissions (chmod) or content ...
- 105k
7
votes
1
answer
22k
views
Preserve ACLs with rsync
Sorry, but I can find no solution to this apparent simple problem searching online and this forum.
I have a simple need: copy a directory and its contents to another local location, preserving ACLs ...
- 131
4
votes
1
answer
18k
views
How to allow users to create and delete file(s) / folder(s), but not modify them?
I have created a group name "app-data" and a folder /db-data/archived-data/
I want members of app-data to have all rights on /db-data/ folder but I want the same group users have only create and ...
- 2,303
0
votes
1
answer
197
views
Using ACL to control read and writes by specific groups
I'm new to ACL so I'm creating some demo folders, unfortunately it's not working as expected.
The folder Triangle belongs to user pyramid in group triangle.
The user Cube in group square needs ...
- 182
0
votes
1
answer
1k
views
Force permissions on directory for Netatalk
I'm working on Ubuntu Server 14.04 and I'm trying to set up an AFP share with Netatalk. So far so good aside from the privileges to the files inside the shared directories.
I want to set up a system ...
- 1
7
votes
1
answer
5k
views
Allow a LXC container user to write as an external user to a mounted directory
Apologies for the title, the setup is actually quite simple. I have a host with a user called oli and a directory called /media/steve/incoming that oli can read-write-execute in. Within that I have a ...
Oli♦
- 288k