An acl, or Access Control List, is part of a security technology which employs a list of object access permissions for each user who can access that object. The term is used in several common implementations ranging from the Microsoft Windows NTFS filesystem to Cisco Internet firewall device rules.

learn more… | top users | synonyms

0
votes
0answers
21 views

CygWin SSH server and “StrictModes” via Windows ACL

I have successfully set up the SSH server in a CygWin installation on Win2k3. It works properly through both password authentication and public/private keys. However, once I set 'StrictModes' in ...
1
vote
0answers
24 views

Sharing a folder through NFSv4 and Samba on Ubuntu

I encountered problem with configure samba server above nfsv4. I have 2 servers with Ubuntu 12.04 on both of them. First server serve as NFSv4 storage, for VDI and user shares. File system is ext4. ...
1
vote
1answer
40 views

Powershell: Piping input to Set-Acl

have a messed up folder with inconsistent ACLs which I need to uniform. I hoped to accomplish this with powershell. So I'm trying to search for all files missing the required group and applying the ...
0
votes
0answers
11 views

Program / Service to Allow Multiple Users to use a Single Shared Account

I've found it very common for teams to share a single username / password for online services, such as domain registrars. Clearly, giving multiple people access to a single account by passing around ...
0
votes
1answer
21 views

How do I chmod ACLs to groups with spaces in the name on Mac OS X?

I'm trying to add an ACL for the group "Domain Users", but since it has spaces in the group name it isn't parsed correctly by chmod: $ chmod -R +a 'DOMAIN\Domain Users allow ...
1
vote
1answer
55 views

What does squid proxy do when negating acl proxy_auth_regex in rule?

The NTLM auth helper only tags users as authorized if they are member of a AD group. The Kerberos auth helper tags a user as authorized, if he was able to log in, the group check can't be done by the ...
0
votes
0answers
12 views

windows 2003 Terminal server, “users” item removed from ACL of “HKLM\SOFTWARE\Classes”

After having installed a software on my Windows 2003 terminal server, no user has been able to launch applications anymore. When they log to the server via remote desktop, each icon they click ...
1
vote
1answer
42 views

Logrotate: Postrotate setfacl failed with no such file or directory error

I set some extended ACL entries for /var/log/squid3/ and /var/log/squid3/access.log. sudo setfacl -m u:jetty:r-x,g:adm:r-x /var/log/squid3 sudo setfacl -m u:jetty:r--,g:adm:r-- ...
1
vote
1answer
15 views

How can I remove the ACL of PIX firewall?

I'm just trying to how PIX works. Anyway how can I remove the ACL from my GNS3's PIX? PIX-SECU(config)# show access-list access-list cached ACL log flows: total 0, denied 0 (deny-flow-max 4096) ...
2
votes
0answers
36 views

find nouser equivalent for POSIX ACLs

On a Linux system it is possible to find files that are owned by a uid that does not have a user name assigned with "find -nouser". I have been looking for an equivalent that will search the POSIX ...
-2
votes
1answer
25 views

Can I conclusively determine that a remote web server is denying access by blocking my IP address? [closed]

Let's say a web server administrator has configured his web server to deny traffic from my IP address or address range and throws an http 403 forbidden when I hit the site. (In this scenario I am ...
1
vote
1answer
53 views

Can I add a local linux user to a supplementary active directory group?

The Linux box in question is a CentOS 6.5 machine that is bound to active directory. I can change a local user's primary group to an active directory group. But i can't add the active directory group ...
1
vote
1answer
15 views

Is it possible to add description to cisco ACL?

I would like to add a description to cisco ACL. Something like: Permit all traffic from the R&D depatment to the lab. or Deny traffic from HA to R&D. Is it possible?
3
votes
1answer
49 views

Squid 3.2 - Proper configuration for random outbound IP with a single user authentication?

I'm attempting to use AclRandom for Squid 3.2 and I think I'm a bit confused on the proper method for this. Here is my configuration: http_port 3128 auth_param basic program ...
0
votes
1answer
82 views

Exim ACL to limit sender to send mail only to localdomain

I'm currently using exim, and i need to limit a mail address to send mails only to local domain and deny mail to outgoing domains. I think it could be like this : deny local_parts = ...
2
votes
2answers
68 views

With Azure, can I create a VLAN and put all my worker roles and VM's in there?

Is it possible to create a sort of VLAN or private azure LAN thingy .. where I can put any new Workers or VM's in that VLAN? one of the reasons is because I was hoping to create a SQL server on a VM ...
4
votes
1answer
74 views

What exactly is included in the Windows “Everything” security identifier (e.g. does it include computer accounts like DOMAIN\MACHINE$)?

This is a generalization of a question I initially had asked about computer accounts. I asked: When one sets Windows permissions for "Everyone", do these permissions apply to computer accounts ...
1
vote
1answer
54 views

OpenLDAP - ACL “set” notation not matching properly

I've got to set up an externally-anonymous accessible LDAP directory on an Ubuntu 12.04 Server, and I want to keep authentication and internal data in a different subtree. Example of the LDAP layout ...
0
votes
1answer
47 views

Cisco IOS, restrict IP addresses per ethernet port #

I am configuring a Cisco 881, and am interested in restricting individual ports on the LAN (FastEthernet 0-3). I would like to be able to limit the IP addresses that someone can use based on which ...
0
votes
0answers
14 views

NFSv4 ACL with directory create perm, but can not read/write files under the directory

Next is what I need to do: Two users admin-x as directory administrator, user-m as the data producer, user 1: admin-x user 2: user-m In the directory named '/share' which with nfsv4 acls set on it, ...
0
votes
0answers
32 views

Samba file mask calculation on ACL - missing r

I would like to ask a detail how samba deals with permission on ACL on servers. I did dig very hard and deep but no luck with this one. I have set ACL support over this think and again, regardles of ...
10
votes
1answer
100 views

Can I “merge” two groups using SID history?

I have two AD groups which were erroneously created while there should instead have been only one group; they contain the exact same users. However, these groups have been assigned various permissions ...
-2
votes
1answer
122 views

File base permissions are 666, why and is this a configurable value? [closed]

It is specified in various documentation on the net that linux/unix file base permissions are 666 with regards to how umask manipulates. This is also relevant with regards to the fact that default ...
1
vote
1answer
83 views

setfacl for all users

Is it possible to set the permission for all users or all groups that are present in the acl? Namely, I would like a command that applies permissions uniformly for all members of an entity type, ...
0
votes
0answers
29 views

Set ACL to allow owner to delete files in share

I have a main shares folder which has the following structure: Share->User Folder->Files I want the users to be able to add files to other users folder, but only the fodler owner to be able to ...
0
votes
0answers
218 views

subinacl.exe does not seem to work for “trustedinstaller” — what is the SID to use instead?

I am looking at re-setting the owner of a big pile of files after changing the owner of the Windows directory and all its subdirectories and files (in a backup made by "cloning" a drive -- if I don't ...
0
votes
1answer
59 views

Files / Folders Permissions & User / Groups Privileges in a chrooted environment (simple scenario big head-ache)

I know permissions and privileges how-tos can be found anywhere by googling, and trust me, I've done it and thoroughly read every bit of information I could find on the subject. Either I'm not clever ...
3
votes
1answer
145 views

NFS v4 ACL inheritance problems - “i” flag set but not wanted

What I am trying to is add an NFS v4 ACL that allows a directories, child and grandchild, great grandchild etc directories and files to inherit a delete ('D') flag under linux. The underlying file ...
2
votes
1answer
62 views

Public dovecot namespace visible only to some users

I have a dovecot IMAP server (version 2.1.7) with Maildirs and a virtual user setup (e.g. all accounts are mapped to the same system user). I’d like to create a public namespace shared between users A ...
0
votes
0answers
97 views

No acl on nfs mount in RHEL6?

I have several RHEL6 machines. One is exporting an nfs mount to the rest. I have ACL's set on the server (set using setfacl -m), but none of the clients are seeing any of them. Here is my export on ...
7
votes
2answers
887 views

Is there a performance impact of direct AD universal groups assignment?

I'm implementing a tool which secures certain shared resources within AD forest (mostly file shares). By some criteria a list of users from different domains is generated, those users are added to a ...
0
votes
1answer
69 views

OpenLdap ACL Admin Group rights

Hi I have been trying to achieve Admin and operator level ACL to no avail. So far I've got access to attrs=userPassword,shadowLastChange by self write by anonymous auth by ...
3
votes
1answer
894 views

How to correctly ldapmodify replace olcAccess lines?

This is a part from olcDatabase={1}hdb.ldif olcAccess: {0}to attrs=userPassword,shadowLastChange by self write by anonymous auth by dn="cn=admin,dc=somesite,dc=com" write by * none olcAccess: ...
0
votes
0answers
21 views

In openldap, how to grant write access to automountMap to a user additional to rootDn?

The need is to define/create a user/account other than rootDn to have all rights on Dn:automountMapName=auto_environments,dc=company,dc=com to add/delete of mount entries. I'm a newbie to openldap ...
0
votes
1answer
140 views

AWS VPC ACL for private subnets

I created a VPC using the VPC wizard with two subnets (public and private), and a NAT in front of the private subnet. Looking at the ACL for the the subnets, there was a rule to allow all INBOUND ...
1
vote
2answers
47 views

Is it possible to limit access to an svn server to not just credentials but to machines as well?

my office has provided laptops to all staff in addition to the new desktops we just have. I have been asked to secure our svn server which is a dedicated server hosted somewhere with ubuntu running on ...
0
votes
2answers
170 views

Set group permission on folder

I have a folder with lots of subfolders D:\Data\Subfolder1 D:\Data\Subfolder2 D:\Data\Subfolder3 D:\Data\Subfolder4 D:\Data\Subfolder5 ... I need to create three active directory groups ...
1
vote
0answers
68 views

Default owner and setting sticky bit by default

I have a RHEL 5.5 server and want to set up some specific security for a directory: Please note that I am not asking how to do this one time... that has already been done. I want all new ...
0
votes
2answers
78 views

enable acl in VPS

How can I enable acl in my VPS? I have the next in /etc/fstab: proc /proc proc defaults 0 0 none /dev/pts devpts rw 0 0 And executing df I get: Filesystem ...
0
votes
0answers
107 views

Applying exim ACL to mail from backup server

I use exim as a mail server. To combat spam, I have a catch-all email address, and use a custom email address for every service I sign up to. If they leak my address to a spam list, I can just block ...
2
votes
1answer
55 views

OpenLDAP ACL's using sets

So, I am attempting to write some LDAP rules that will allow certain people the ability to write some subtrees. Let's say we have this user: dn: uid=minion1,o=mycompany,ou=cust,dc=some,dc=domain ...
0
votes
2answers
52 views

Copy permissions of Windows folders

For Windows 2008 R2, is there a way to copy the permissions when you copy-paste the folder? Or a way to easily document the permissions for all files/folders?
0
votes
2answers
75 views

Prevent Administrators from accessing each others folders on Windows Server 2008

I have a Windows 2008 server running a Rails App, owned by one of our Hardware engineers. Now one of our marketing guys created another rails app and my boss wants me to put it on that same server. ...
0
votes
1answer
167 views

ejabberd ACL for specific chatrooms

Is it possible (if yes, how) to implement per-chatroom deny/allow styled ACL for users or groups in ejaberd?
1
vote
1answer
293 views

How to add ACI's to OpenLDAP properly

So I'm trying to get some ACI's added to my OpenLDAP system (hosting on CentOS 6). I've read how others put their ACI's in bdb like so... olcAccess: to attrs=userPassword,shadowLastChange by ...
0
votes
1answer
486 views

CIFS share on Freenas not giving full control to AD users

I've managed to setup a FreeNAS server and connect it to AD. My problem comes when I try to edit permissions from windows. I already set the owner to be an AD user that I'm logged in with, but when I ...
0
votes
0answers
37 views

Apache2 block all but static media ( images, js & css )

I have apache on a low-powered server I want to use for static content only. I am looking for a way to stop apache serving any file other than images / css / js etc. I have tried the following ...
0
votes
1answer
67 views

Imap subfolders not shown in list command - perhaps acls misconfiguration

My goal is to copy the whole folder structure with all mails from one imap account to another. The tool I am using for this is imapcopy (the java based version from code.google.com since the ...
-2
votes
1answer
26 views

Extended Access List Example

I want exactly 1 pc that can use udp in my network. How would i do this? Router(config)#access-list 101 permit udp 192.168.100.111 Router(config)#access-list 101 deny udp any any Is this right?
0
votes
0answers
41 views

GitHub Enterprise ACLs

Is there a way to do github repos acls on the branch level? Or only on repositories level? Sorry might be a very easy answer, but I can't find the answer in their documentation.