An acl, or Access Control List, is part of a security technology which employs a list of object access permissions for each user who can access that object. The term is used in several common implementations ranging from the Microsoft Windows NTFS filesystem to Cisco Internet firewall device rules.

learn more… | top users | synonyms

0
votes
1answer
236 views

AWS VPC ACL for private subnets

I created a VPC using the VPC wizard with two subnets (public and private), and a NAT in front of the private subnet. Looking at the ACL for the the subnets, there was a rule to allow all INBOUND ...
1
vote
2answers
53 views

Is it possible to limit access to an svn server to not just credentials but to machines as well?

my office has provided laptops to all staff in addition to the new desktops we just have. I have been asked to secure our svn server which is a dedicated server hosted somewhere with ubuntu running on ...
0
votes
2answers
247 views

Set group permission on folder

I have a folder with lots of subfolders D:\Data\Subfolder1 D:\Data\Subfolder2 D:\Data\Subfolder3 D:\Data\Subfolder4 D:\Data\Subfolder5 ... I need to create three active directory groups ...
1
vote
0answers
85 views

Default owner and setting sticky bit by default

I have a RHEL 5.5 server and want to set up some specific security for a directory: Please note that I am not asking how to do this one time... that has already been done. I want all new ...
0
votes
2answers
146 views

enable acl in VPS

How can I enable acl in my VPS? I have the next in /etc/fstab: proc /proc proc defaults 0 0 none /dev/pts devpts rw 0 0 And executing df I get: Filesystem ...
0
votes
0answers
130 views

Applying exim ACL to mail from backup server

I use exim as a mail server. To combat spam, I have a catch-all email address, and use a custom email address for every service I sign up to. If they leak my address to a spam list, I can just block ...
2
votes
1answer
73 views

OpenLDAP ACL's using sets

So, I am attempting to write some LDAP rules that will allow certain people the ability to write some subtrees. Let's say we have this user: dn: uid=minion1,o=mycompany,ou=cust,dc=some,dc=domain ...
0
votes
2answers
56 views

Copy permissions of Windows folders

For Windows 2008 R2, is there a way to copy the permissions when you copy-paste the folder? Or a way to easily document the permissions for all files/folders?
0
votes
2answers
91 views

Prevent Administrators from accessing each others folders on Windows Server 2008

I have a Windows 2008 server running a Rails App, owned by one of our Hardware engineers. Now one of our marketing guys created another rails app and my boss wants me to put it on that same server. ...
0
votes
1answer
213 views

ejabberd ACL for specific chatrooms

Is it possible (if yes, how) to implement per-chatroom deny/allow styled ACL for users or groups in ejaberd?
1
vote
1answer
486 views

How to add ACI's to OpenLDAP properly

So I'm trying to get some ACI's added to my OpenLDAP system (hosting on CentOS 6). I've read how others put their ACI's in bdb like so... olcAccess: to attrs=userPassword,shadowLastChange by ...
0
votes
1answer
576 views

CIFS share on Freenas not giving full control to AD users

I've managed to setup a FreeNAS server and connect it to AD. My problem comes when I try to edit permissions from windows. I already set the owner to be an AD user that I'm logged in with, but when I ...
0
votes
1answer
85 views

Imap subfolders not shown in list command - perhaps acls misconfiguration

My goal is to copy the whole folder structure with all mails from one imap account to another. The tool I am using for this is imapcopy (the java based version from code.google.com since the ...
-2
votes
1answer
29 views

Extended Access List Example

I want exactly 1 pc that can use udp in my network. How would i do this? Router(config)#access-list 101 permit udp 192.168.100.111 Router(config)#access-list 101 deny udp any any Is this right?
0
votes
0answers
49 views

GitHub Enterprise ACLs

Is there a way to do github repos acls on the branch level? Or only on repositories level? Sorry might be a very easy answer, but I can't find the answer in their documentation.
-1
votes
1answer
82 views

Access Control Lists & DHCP

Please take a look at this image right here. In the image above you can see a virtual netwerk simulation program (CISCO Packet Tracer 6.0) where I'm trying to setup a network and secure it. However ...
0
votes
1answer
503 views

Permission Denied Issue : setfacl

I have tried to set Extended ACL for the folder ssam and ended with a "Permission Denied" message at the end. I have made sure that the ACL is enabled and is added in /etc/fstab for /home. Below are ...
0
votes
2answers
48 views

Disallow overriding of access lists in .htaccess (Blacklist based AllowOverride)

We have some web software with its own .htaccess. No on our internal test servers we want to configure some access permissions (htaccess passwords) We want to avoid modifications specific to the ...
4
votes
2answers
728 views

Is it possible to list all permissions where I don't have access

I'm looking for a way to recursively go through my entire file share ( fairly large 3TB of files ) and list out all files/folders that I don't have access to. Due to a migration and some errors on ...
0
votes
1answer
122 views

Squid “refusing connections” with big ACL

I've successfully set up squid and it's working as is should. I'm using "Squidman" on OS X Server (underlying squid version is 3.1.12). However, I want to use squid to block certain porn sites, so I ...
0
votes
2answers
266 views

Should a domain user who owners a folder be able to create sub-folders (Windows Server 2008 R2)

When deploying our server application, on Windows Sever 2008 R2, we create a folder in "C:\Program Files" with an local administrator user and change the owner of the folder to that of a particular ...
2
votes
1answer
39 views

Per URI based ACL for IIS?

I have ASPX website running on Windows 2008 R2, I want to limit the access for several interfaces, but not all of them. e.g I have an interface /admin for website www.contoso.com, but I only want ...
0
votes
0answers
332 views

Squid Proxy Splash page always showing up

I am further along with using Squid to present a splash page to guest users, and I wrote a basic HTML splash page to be presented to users. I wrote the Splash page HTML to grab the url from Squid ...
0
votes
0answers
34 views

modifying user's group nuked ACL…why?

i was configuring vsftpd (Centos 6, btw) and when i changed the primary group, it broke my ACL. i get that the directory got re-chown/grp'd but what was really weird is that i when i reset the group, ...
-2
votes
1answer
102 views

Cisco Switch VLAN vs ACL [closed]

I am trying to create a VLAN in which my PS3 can access a remote PC that feeds it video. I want my PS3 not to be able to communicate to the internet, and be able to move that remote PC into the same ...
1
vote
1answer
405 views

How set ZFS ACL permissions on CentOS 6

I use last ZFS (ZFS for Linux) on the CentOS 6. Create successfully pool, all working fine. But i have one question. How i can set ACL for ZFS folder/file? GNU ls, chmod, and other coreutils not ...
0
votes
1answer
126 views

CSS files in subfolders : 401 errors after porting webapp to new server running IIS7.5

We moved our webapp from Windows 2003 Server to Windows 2008 R2 IIS7.5. CSS isn't working. The CSS file is being linked in this manner: <head> <style type="text/css" ...
0
votes
3answers
695 views

How to set acl on my fstab file?

I would like to enable acl on my remote server. So I type the following command df to know on which partition I am : Here is the result : Filesystem 1K-blocks Used Available Use% Mounted on ...
0
votes
1answer
137 views

setfacl not working on my Web directory

On Debian 7.0 I've setup filesystem access control lists on my mount mx:/srv/www$ mount | grep acl /dev/xvda on / type ext3 (rw,relatime,errors=remount-ro,acl,data=ordered) Now I simply want newly ...
1
vote
1answer
419 views

(EXIM) ACL for only allowing internal domain to send to internal group alias

I'm trying to create an ACL rule that will only allow internal users/white listed users to send to particular group aliases such as all@ or office2@ I know I need something similar to: deny ...
0
votes
1answer
575 views

Windows ACL during explorer copy

I need to prevent the acl subtitution during folder copy and I don't know how to do. I have two repositories, the source and the destination with different acl. Users have to copy (with windows's file ...
1
vote
1answer
250 views

Generate icacls script of permissions

I am looking for a utility to which I can specify a directory to be recursively scanned. The utility should generate a batch file consisting of calls to icacls to reproduce the file and directory ...
-1
votes
1answer
106 views

Risks of Authenticated Users group assigned by default [closed]

I have noticed that Windows seems to give all Authenticated Users powerful rights (Modify) propagated from the root of the drive. Suppose you create a folder under the root and do not adjust its ...
2
votes
2answers
126 views

How do I find where packets are coming from that are being blocked by an ACL?

I have an ACL to prevent regular workstations from accessing the management vlan on our switch. Every 5 minutes we get the following log entry: %SEC-6-IPACCESSLOGS: list mgtvlan-acl denied 0.0.0.0 ...
-1
votes
1answer
246 views

Tunneling specific webserver port on localhost using SSH

It is possible allow website surfing running on a specific port (10000) only accessing it trough SSH tunnel? Real case: Apache is running on port 80 for http and 443 for https, anyone can surf all ...
1
vote
1answer
148 views

Simple ACL not working

Network: Cisco 2921. Two subnets. 192.168.1.0/24 and 2.0/24. For some reason I can't get inter-subnet communication. I bound an ACL with the following statements to the inbound interface of each ...
2
votes
0answers
33 views

Mercurial storing metadata on OS X

I was searching for convenient incremental snapshot & rollback & show-what-changed solution for my OS X boxes, and ended with simple yet powerful idea — why not create Mercurial repository at ...
2
votes
0answers
64 views

access control list not working on folders

ive got a problem with setting up access control lists for a folder that i want a single user to be able to edit, the permissions were set with the command setfacl -R -m u:mik:rwx ...
3
votes
0answers
218 views

What Samba settings to use for perfect emulation of Windows ACLs

Can anyone suggest what settings I should use with Samba to get full support for Windows ACLs? At the moment I have the following configuration: /etc/fstab: acl,user_xattr ...
1
vote
0answers
207 views

ACL mask assigned when a group member creates files/directories on a Samba server from Windows effectively make them read-only

Home directories are shared by Samba running on CentOS 6.3 with the following configuration: [homes] comment = Home Directories read only = No inherit acls = Yes ...
1
vote
0answers
42 views

Can Squid3 access PHP Helpers

Can Squid3 use PHP helper programs other than for ACL and redirect? I need Squid to use a PHP program (with mysql access) to set the parent proxy that should be used for a particular connection, so ...
1
vote
1answer
257 views

Setting per-directory umask using ACLs

We want to mimic the behavior of a system-wide 002 umask on a certain directory foo, in order to ensure the following result: All sub-directories created underneath foo will have 775 permissions All ...
2
votes
1answer
749 views

(Powershell) Method to return a list of groups where a specific user has 'write member' security

We use a piece of web-based software that users can log on to in order to manage access to shares controlled with AD groups. The list of groups a user can manage are the groups on which they have ...
5
votes
3answers
457 views

What is the ZFS ACL limit?

Does anyone know how many user ACL's ZFS can handle? With other words: for how many users can I set ACL's like this one for the same directory? setfacl -m user:test1:rwxpDdaARWcCos:fd----:allow ...
0
votes
1answer
883 views

How to whitelist external access to an internal webserver via Cisco ACLs?

This is our company's internet gateway router. This is what I want to accomplish on our Cisco 2691 router: All employees need to be able to have unrestricted access to the internet (I've blocked ...
0
votes
3answers
496 views

rsynced files not getting proper ACL

I use rsync (rsync-3.0.6-5.el6_0.1.x86_64 on Scientific Linux 6) to transfer files from a VFAT disk to an NFS mounted ext3 file system. I have ACLs set up on the ext3 system and all works as expected ...
0
votes
1answer
301 views

Cisco ASA 8.2 ACL For NAT

Sadly I have gone back in time to ASA 8.2(5)33 which I am not so familiar with. I have configured NAT between two interfaces but traffic isn't passing becasue I can't get the ACL to work; (The full ...
2
votes
1answer
464 views

Default permission for newly-created files/folders using ACLs not respected by commands like “unzip”

I am having trouble with setting up a system for multiple users accessing the same set of files. I've read tuts and docs around and played with ACLs but haven't succeeded yet. MY SCENARIO: Have ...
2
votes
0answers
519 views

How to configure SAMBA file server to be a windows look-alike?

I'm using an openfiler appliance in an Active Directory (W2k8R2 DC) environment. I would like to make my shares as quite as possible look like windows shares for my users. Most things work well but ...
2
votes
2answers
732 views

Cisco IOS router config — how to disable SSH / SNMP on all but loopback address?

Sorry for the naive question; a quick reading of the cisco docs doesn't answer this question... So I've got a router (say for the sake of argument a 4500 running IOS 15.x) It has interfaces in 3 ...