Questions tagged [acl]

ACL stands for access control list. ACLs extend permissions on files beyond the traditional user-group-others triple.

Many Unix variants provide more fine-grained file permissions than the traditional, standard triple of permissions for the owning user, the owning group and others. These permissions are expressed through access control lists. The permissions that can be expressed through ACLs vary between Unix variants.

POSIX ACLs allow setting the read/write/execute bits separately for more than one user or group, and also allow setting default access rights for new files at directory-level, with default ACLs.

Related tags

Resources

406 questions
6
votes
2 answers

Linux: an easy and elegant way to find all files with acl set?

I want to find all files with acl set. I know this dirty solution: for find all files with acl set in dir. /etc sudo ls -lhR /etc|grep + Someone know a more elegant solution?
elbarna
  • 12,695
6
votes
1 answer

Can not explain ACL behavior

So this is situation: got server for web-developers. There are many developers. All developers + PHP + Apache belongs to www group. There is a development directory - development. The goal is that every file in development directory has 755…
4
votes
2 answers

Why don't I have read access to files with modified ACL?

My aim is to allow read access to folder /var/www/mysite/ only for users in group www-data using a default ACL. This works for a regular ACL, but not for a default ACL. Why? This is how I did it: I am logged on as user www-data who is in group…
4
votes
1 answer

Permissions set on new files and folders by default ACLs

I want to set up default permission inside a folder, so that all new created folders and files have this default permission. So I did some research and the best thread I found was this one. So I came up with this little "test": #!/bin/bash #…
toddeTV
  • 155
3
votes
1 answer

setfacl not giving permission to the specified user

I have this weird issue, I'm trying to wrap my mind around acl to give some developers write access to a few files in a folder This is an example folder structure, I have a settings.local.php file there, and I'm giving it 000 permissions with chmod,…
Radius
  • 133
3
votes
0 answers

acl not overriding unix rights?

I have a folder with UNIX rights that forbid access to me : ls -l Sources-labo drwxrwxrw-+ 6 nobody applications 73728 févr. 25 13:25 Sources-labo groups users vault but the ACL are set so that I should have access anyway (because of the…
2
votes
1 answer

setfacl -m doesn't add permission to that of the traditional file permissions?

There is a directory /test/test2/. Its owner is root and the group is test and the permission is drwxr-xr-x. I executed setfacl -m group:test:w ./ in that directory. Now, as the user test whose groups includes test, if I run getfacl ./ in that…
2
votes
0 answers

How do I specify a relative change to ACL of current user/group?

I have a directory that already might have some subdirectory configured rwx for www-data, but I want to make a final pass and ensure www-data has a full read access on the full directory. All these are part of some bash scripting, and I need to…
vaab
  • 254
2
votes
2 answers

how to restrict a user to access the file

I have created a file which resides inside my directory on a unix server. People have sudo privileges. How can I restrict them to read that file (even when they have sudo previleges) ?
anurag
  • 362
1
vote
2 answers

How to remove directory flags on linux?

I have a folder called "post", when I write getfacl post I get these results: # file: post # owner: www-data # group: ftpgroup # flags: -s- user::rwx group::rwx other::r-x default:user::rwx default:group::rwx default:other::r-x As you can see there…
stramin
  • 113
1
vote
1 answer

setfacl fails on files created by Apache

I have a directory owned by my user vagrant. The webserver (and web application) run as www-data. Both users need to create and modify directories and files in this directory, regardless of who created them. As vagrant I can modify files created by…
PeterB
  • 111
0
votes
1 answer

User cannot write to directory after granting permission with setfacl

EDIT: I forgot to add /mnt/storage has been mounted using mergerfs (pooling 2 drives which are formatted as ext4) I am running Lubuntu 22.04.2 and have run the following commands (note the user radarr belongs to the group media): sudo setfacl -Rm …
ali
  • 1
0
votes
1 answer

Share access between users

I need to give a user access to an other directory (that is not owned by him). e.g. User sam with home /home/sam needs to access /var/www/html. I see multiple ways of doing this. match the rights match the ownership create a group for both ACLs I…
chris01
  • 571
0
votes
2 answers

Do we have log for ACL ..?

I would like to know is there any way to list the ACL of particular user for all files. Example, for cronjob we have details in /var/spool/cron/. In the same way does ACL store the info anywhere?
Siva
  • 9,077
0
votes
1 answer

Other acl manipulation executables than getfacl/setfacl?

I am familiar with setfacl/getfacl. However, I am wondering if there are any other executables/packages that maintain similar functionality with regards to manipulating acl. I am not looking for anything in particular, I am trying to contemplate…