An acl, or Access Control List, is part of a security technology which employs a list of object access permissions for each user who can access that object. The term is used in several common implementations ranging from the Microsoft Windows NTFS filesystem to Cisco Internet firewall device rules.

learn more… | top users | synonyms

1
vote
0answers
324 views

Sharing a folder through NFSv4 and Samba on Ubuntu

I encountered problem with configure samba server above nfsv4. I have 2 servers with Ubuntu 12.04 on both of them. First server serve as NFSv4 storage, for VDI and user shares. File system is ext4. ...
2
votes
1answer
660 views

Powershell: Piping input to Set-Acl

have a messed up folder with inconsistent ACLs which I need to uniform. I hoped to accomplish this with powershell. So I'm trying to search for all files missing the required group and applying the ...
0
votes
0answers
34 views

Program / Service to Allow Multiple Users to use a Single Shared Account

I've found it very common for teams to share a single username / password for online services, such as domain registrars. Clearly, giving multiple people access to a single account by passing around ...
0
votes
1answer
328 views

How do I chmod ACLs to groups with spaces in the name on Mac OS X?

I'm trying to add an ACL for the group "Domain Users", but since it has spaces in the group name it isn't parsed correctly by chmod: $ chmod -R +a 'DOMAIN\Domain Users allow ...
1
vote
1answer
246 views

What does squid proxy do when negating acl proxy_auth_regex in rule?

The NTLM auth helper only tags users as authorized if they are member of a AD group. The Kerberos auth helper tags a user as authorized, if he was able to log in, the group check can't be done by the ...
0
votes
0answers
53 views

windows 2003 Terminal server, “users” item removed from ACL of “HKLM\SOFTWARE\Classes”

After having installed a software on my Windows 2003 terminal server, no user has been able to launch applications anymore. When they log to the server via remote desktop, each icon they click ...
1
vote
1answer
629 views

Logrotate: Postrotate setfacl failed with no such file or directory error

I set some extended ACL entries for /var/log/squid3/ and /var/log/squid3/access.log. sudo setfacl -m u:jetty:r-x,g:adm:r-x /var/log/squid3 sudo setfacl -m u:jetty:r--,g:adm:r-- ...
1
vote
1answer
136 views

How can I remove the ACL of PIX firewall?

I'm just trying to how PIX works. Anyway how can I remove the ACL from my GNS3's PIX? PIX-SECU(config)# show access-list access-list cached ACL log flows: total 0, denied 0 (deny-flow-max 4096) ...
2
votes
0answers
54 views

find nouser equivalent for POSIX ACLs

On a Linux system it is possible to find files that are owned by a uid that does not have a user name assigned with "find -nouser". I have been looking for an equivalent that will search the POSIX ...
-2
votes
1answer
32 views

Can I conclusively determine that a remote web server is denying access by blocking my IP address? [closed]

Let's say a web server administrator has configured his web server to deny traffic from my IP address or address range and throws an http 403 forbidden when I hit the site. (In this scenario I am ...
1
vote
1answer
174 views

Can I add a local linux user to a supplementary active directory group?

The Linux box in question is a CentOS 6.5 machine that is bound to active directory. I can change a local user's primary group to an active directory group. But i can't add the active directory group ...
1
vote
1answer
36 views

Is it possible to add description to cisco ACL?

I would like to add a description to cisco ACL. Something like: Permit all traffic from the R&D depatment to the lab. or Deny traffic from HA to R&D. Is it possible?
3
votes
1answer
492 views

Squid 3.2 - Proper configuration for random outbound IP with a single user authentication?

I'm attempting to use AclRandom for Squid 3.2 and I think I'm a bit confused on the proper method for this. Here is my configuration: http_port 3128 auth_param basic program ...
0
votes
1answer
272 views

Exim ACL to limit sender to send mail only to localdomain

I'm currently using exim, and i need to limit a mail address to send mails only to local domain and deny mail to outgoing domains. I think it could be like this : deny local_parts = ...
2
votes
2answers
688 views

With Azure, can I create a VLAN and put all my worker roles and VM's in there?

Is it possible to create a sort of VLAN or private azure LAN thingy .. where I can put any new Workers or VM's in that VLAN? one of the reasons is because I was hoping to create a SQL server on a VM ...
4
votes
1answer
228 views

What exactly is included in the Windows “Everything” security identifier (e.g. does it include computer accounts like DOMAIN\MACHINE$)?

This is a generalization of a question I initially had asked about computer accounts. I asked: When one sets Windows permissions for "Everyone", do these permissions apply to computer accounts ...
1
vote
1answer
139 views

OpenLDAP - ACL “set” notation not matching properly

I've got to set up an externally-anonymous accessible LDAP directory on an Ubuntu 12.04 Server, and I want to keep authentication and internal data in a different subtree. Example of the LDAP layout ...
0
votes
1answer
217 views

Cisco IOS, restrict IP addresses per ethernet port #

I am configuring a Cisco 881, and am interested in restricting individual ports on the LAN (FastEthernet 0-3). I would like to be able to limit the IP addresses that someone can use based on which ...
1
vote
0answers
81 views

Samba file mask calculation on ACL - missing r

I would like to ask a detail how samba deals with permission on ACL on servers. I did dig very hard and deep but no luck with this one. I have set ACL support over this think and again, regardles of ...
10
votes
1answer
208 views

Can I “merge” two groups using SID history?

I have two AD groups which were erroneously created while there should instead have been only one group; they contain the exact same users. However, these groups have been assigned various permissions ...
-2
votes
1answer
316 views

File base permissions are 666, why and is this a configurable value? [closed]

It is specified in various documentation on the net that linux/unix file base permissions are 666 with regards to how umask manipulates. This is also relevant with regards to the fact that default ...
1
vote
1answer
107 views

setfacl for all users

Is it possible to set the permission for all users or all groups that are present in the acl? Namely, I would like a command that applies permissions uniformly for all members of an entity type, ...
0
votes
1answer
133 views

Files / Folders Permissions & User / Groups Privileges in a chrooted environment (simple scenario big head-ache)

I know permissions and privileges how-tos can be found anywhere by googling, and trust me, I've done it and thoroughly read every bit of information I could find on the subject. Either I'm not clever ...
3
votes
1answer
412 views

NFS v4 ACL inheritance problems - “i” flag set but not wanted

What I am trying to is add an NFS v4 ACL that allows a directories, child and grandchild, great grandchild etc directories and files to inherit a delete ('D') flag under linux. The underlying file ...
2
votes
1answer
137 views

Public dovecot namespace visible only to some users

I have a dovecot IMAP server (version 2.1.7) with Maildirs and a virtual user setup (e.g. all accounts are mapped to the same system user). I’d like to create a public namespace shared between users A ...
0
votes
0answers
336 views

No acl on nfs mount in RHEL6?

I have several RHEL6 machines. One is exporting an nfs mount to the rest. I have ACL's set on the server (set using setfacl -m), but none of the clients are seeing any of them. Here is my export on ...
7
votes
2answers
2k views

Is there a performance impact of direct AD universal groups assignment?

I'm implementing a tool which secures certain shared resources within AD forest (mostly file shares). By some criteria a list of users from different domains is generated, those users are added to a ...
0
votes
1answer
382 views

OpenLdap ACL Admin Group rights

Hi I have been trying to achieve Admin and operator level ACL to no avail. So far I've got access to attrs=userPassword,shadowLastChange by self write by anonymous auth by ...
4
votes
1answer
4k views

How to correctly ldapmodify replace olcAccess lines?

This is a part from olcDatabase={1}hdb.ldif olcAccess: {0}to attrs=userPassword,shadowLastChange by self write by anonymous auth by dn="cn=admin,dc=somesite,dc=com" write by * none olcAccess: ...
0
votes
1answer
382 views

AWS VPC ACL for private subnets

I created a VPC using the VPC wizard with two subnets (public and private), and a NAT in front of the private subnet. Looking at the ACL for the the subnets, there was a rule to allow all INBOUND ...
1
vote
2answers
60 views

Is it possible to limit access to an svn server to not just credentials but to machines as well?

my office has provided laptops to all staff in addition to the new desktops we just have. I have been asked to secure our svn server which is a dedicated server hosted somewhere with ubuntu running on ...
0
votes
2answers
701 views

Set group permission on folder

I have a folder with lots of subfolders D:\Data\Subfolder1 D:\Data\Subfolder2 D:\Data\Subfolder3 D:\Data\Subfolder4 D:\Data\Subfolder5 ... I need to create three active directory groups ...
1
vote
0answers
152 views

Default owner and setting sticky bit by default

I have a RHEL 5.5 server and want to set up some specific security for a directory: Please note that I am not asking how to do this one time... that has already been done. I want all new ...
0
votes
2answers
261 views

enable acl in VPS

How can I enable acl in my VPS? I have the next in /etc/fstab: proc /proc proc defaults 0 0 none /dev/pts devpts rw 0 0 And executing df I get: Filesystem ...
0
votes
0answers
157 views

Applying exim ACL to mail from backup server

I use exim as a mail server. To combat spam, I have a catch-all email address, and use a custom email address for every service I sign up to. If they leak my address to a spam list, I can just block ...
2
votes
1answer
152 views

OpenLDAP ACL's using sets

So, I am attempting to write some LDAP rules that will allow certain people the ability to write some subtrees. Let's say we have this user: dn: uid=minion1,o=mycompany,ou=cust,dc=some,dc=domain ...
0
votes
2answers
70 views

Copy permissions of Windows folders

For Windows 2008 R2, is there a way to copy the permissions when you copy-paste the folder? Or a way to easily document the permissions for all files/folders?
0
votes
2answers
112 views

Prevent Administrators from accessing each others folders on Windows Server 2008

I have a Windows 2008 server running a Rails App, owned by one of our Hardware engineers. Now one of our marketing guys created another rails app and my boss wants me to put it on that same server. ...
0
votes
1answer
303 views

ejabberd ACL for specific chatrooms

Is it possible (if yes, how) to implement per-chatroom deny/allow styled ACL for users or groups in ejaberd?
1
vote
1answer
806 views

How to add ACI's to OpenLDAP properly

So I'm trying to get some ACI's added to my OpenLDAP system (hosting on CentOS 6). I've read how others put their ACI's in bdb like so... olcAccess: to attrs=userPassword,shadowLastChange by ...
0
votes
1answer
950 views

CIFS share on Freenas not giving full control to AD users

I've managed to setup a FreeNAS server and connect it to AD. My problem comes when I try to edit permissions from windows. I already set the owner to be an AD user that I'm logged in with, but when I ...
0
votes
1answer
141 views

Imap subfolders not shown in list command - perhaps acls misconfiguration

My goal is to copy the whole folder structure with all mails from one imap account to another. The tool I am using for this is imapcopy (the java based version from code.google.com since the ...
-2
votes
1answer
37 views

Extended Access List Example

I want exactly 1 pc that can use udp in my network. How would i do this? Router(config)#access-list 101 permit udp 192.168.100.111 Router(config)#access-list 101 deny udp any any Is this right?
0
votes
0answers
62 views

GitHub Enterprise ACLs

Is there a way to do github repos acls on the branch level? Or only on repositories level? Sorry might be a very easy answer, but I can't find the answer in their documentation.
-1
votes
1answer
103 views

Access Control Lists & DHCP

Please take a look at this image right here. In the image above you can see a virtual netwerk simulation program (CISCO Packet Tracer 6.0) where I'm trying to setup a network and secure it. However ...
0
votes
1answer
793 views

Permission Denied Issue : setfacl

I have tried to set Extended ACL for the folder ssam and ended with a "Permission Denied" message at the end. I have made sure that the ACL is enabled and is added in /etc/fstab for /home. Below are ...
0
votes
2answers
64 views

Disallow overriding of access lists in .htaccess (Blacklist based AllowOverride)

We have some web software with its own .htaccess. No on our internal test servers we want to configure some access permissions (htaccess passwords) We want to avoid modifications specific to the ...
4
votes
2answers
1k views

Is it possible to list all permissions where I don't have access

I'm looking for a way to recursively go through my entire file share ( fairly large 3TB of files ) and list out all files/folders that I don't have access to. Due to a migration and some errors on ...
0
votes
1answer
162 views

Squid “refusing connections” with big ACL

I've successfully set up squid and it's working as is should. I'm using "Squidman" on OS X Server (underlying squid version is 3.1.12). However, I want to use squid to block certain porn sites, so I ...
0
votes
2answers
308 views

Should a domain user who owners a folder be able to create sub-folders (Windows Server 2008 R2)

When deploying our server application, on Windows Sever 2008 R2, we create a folder in "C:\Program Files" with an local administrator user and change the owner of the folder to that of a particular ...