An acl, or Access Control List, is part of a security technology which employs a list of object access permissions for each user who can access that object. The term is used in several common implementations ranging from the Microsoft Windows NTFS filesystem to Cisco Internet firewall device rules.

learn more… | top users | synonyms

1
vote
2answers
1k views

How to prevent file owner from changing/deleting their own file? Linux CentOS

This is NOT your standard "how do permissions work" question! I'm thinking the answer will probably involve ACL, but I don't know how exactly. I've messed around with standard permissions, guid, ...
-1
votes
1answer
601 views

How to get ACL working in CentOS?

I have this line in fstab: /dev/sda3 / ext3 defaults 1 2 I supposed I should change it to: /dev/sda3 / ext3 defaults,acl 1 2 I also suppose I should run: mount -t ext3 -o acl ...
1
vote
2answers
3k views

How to make security group in one forest show up in another forest?

I have two Win2k8 forests which I do maintenance on. The two forests have full 2 way external, non transitive trust with each other. I have a folder in forest X, domain countryX.mycompany.com ...
6
votes
3answers
4k views

linux/setfacl - Set all current/future files/directories in parent directory to 775 with specified owner/group

I have a directory called "members" and under it there are folders/files. How can I recursively set all the current folders/files and any future ones created there to by default have 775 permissions ...
1
vote
2answers
635 views

My facebook blocking ACL has stopped working

This probably very simple. This was setup before I arrived, and has been working to block facebook. I recently eliminated some static port forwarding on this 2691 (as in, I don't think anything else ...
1
vote
0answers
165 views

Sharing a folder through NFSv4 and Samba

I have some trouble getting the proper access right to work for a folder shared through samba and nfs. Connected like this: ┌────────────┐ ┌──────────────┐ ┌──────────────┐ │ NFS-Server ├────┤ ...
0
votes
2answers
248 views

Can a typical firewall appliance handle things like throttling requests per user (per IP)?

I'm intending to purchase a Cisco ASA 5510, but am wondering whether or not I should expect to be able to do things such as mentioned in the question title with a typical firewall (or specifically ...
0
votes
1answer
496 views

Forcing Linux Permissions Stickybits or ACLs

I have a question/confusion regarding forcing inherited permissions on Linux (namely CentOS 6) The Setup: 1 x CentOS File Server 2 x CentOS NFS Clients Lots x Windows Samba Clients The file share ...
1
vote
0answers
2k views

HP Procurve 2910AL allow traffic from VLAN to VLAN

We are trying to setup so that the switch handel routing and communication between a few vlans. And then have a link network up to the fw. Here is the config: Running configuration: ; J9145A ...
1
vote
0answers
124 views

Apache not working with Linux ACL

I'm having a big problem with Apache and ACL. I have two servers, both running CentOS 6.3, but the first one is running CPanel/WHM and the second one is just Apache, ACL and Samba for local sharing. ...
1
vote
0answers
383 views

Squid Random Shared ip proxy

Running Squid with a acl random ip setup, Have 745 ip's in the pool and we are about 10 users that use it with tools that are running multiple threads, Check rankings on Google etc Issue: We did ...
0
votes
1answer
309 views

Windows ACL inheritance issues for FTP server and automated tools

I have set up Cerberus FTP server. By default, Cerberus FTP service runs under SYSTEM ACCOUNT. Also I have some console applications which run as scheduled tasks. They are running under a dedicated ...
1
vote
0answers
247 views

Squid 3.1: external_acl_type ttl won't work

I have custom script for handling Squid3's external_acl_type and it works fine. In this script (btw, its PHP) I turned on logging every request into the file. As far as I know from docs TTL value ...
2
votes
1answer
232 views

Setfacl configuration issue in Linux

I am configuring a Linux Server with ACL[Access Control Lists]. It is not allowing me to perform setfacl operation on one of the directoriy /xfiles. I am able to perform the setfacl on other ...
2
votes
2answers
199 views

Preferred method for allowing unprivileged UNIX/Linux users to view syslog information

I have some non-privileged "role accounts" that need the ability to view [some of] the local syslogs (eg. /var/log/messages) for debugging purposes. This is explicitly local log data, not remote ...
1
vote
1answer
245 views

Cygwin: how do I disable /cygdrive

I'm using a cygwin based SSHD server and I want to disable the /cygdrive/c and /cygdrive/d paths; is this possible? Using NTFS ACLs to achieve this will be a mess because the user will need access to ...
1
vote
1answer
557 views

NFSv3 + ACL: mask is gone on clients

I'm sharing a NFS folder among a user group. The default umask on the clients is 0700, and this is a problem because newly created files won't be readable/writable by another users. So, I'm using ...
0
votes
1answer
330 views

Samba share for user groups with Ubuntu. A user can't access files created by other users

I have a folder mounted by using NFS on the server. That folder has subdirectories, and I want to share specific folders to specific user groups by using SAMBA. It doesn't work as expected, because ...
0
votes
2answers
250 views

How to access data in different userhomes from a single non-root user

I have Owncloud on my server running, and it saves uploaded files unter /home/uid/files. But Apache is running as a non-root user, and it can't access(write) the files under /home/uid/files. What is ...
2
votes
0answers
397 views

Folder shares over NFSv4 private to user groups

I want to share a folder over NFSv4, available to some users, and I'm having permission issues. I set up the folder permissions with setGID so new files are created with the folder group owner. But ...
4
votes
1answer
389 views

Disabling/Enabling Modules Parameter RHEL

I'm working with kernel module parameters, and I've found myself a bit confused. In particular, I'm attempting to enable posix ACL support for XFS file systems. This requires the XFS module to be ...
1
vote
2answers
209 views

Domain-wide deny ACL not applied?

I was testing something in my lab: I created an account, and then added a deny ACL to the domain, applying to that and all descendant objects, denying full control. However, I found that using adfind ...
0
votes
1answer
2k views

Why Don't Security ACLs Refresh Automatically?

I have a Windows Server 2003 box acting as a file server. It hosts numerous shared folders with various permissions. The 2003 box is not the Domain Controller / Active Directory host; Active Directory ...
1
vote
2answers
299 views

Unix: how can I change Program's running user and running group?

I changed the APACHE_RUN_GROUP in /etc/apache2/envvars to APACHE_RUN_GROUP=web-content because I want Apache to run us www-data:web-content, insetad of www-data:www-data. I hate monotonous manual ...
0
votes
1answer
277 views

SFTP not connecting through Cisco 877 router

I am configuring a Cisco 877 router in a test environment. We use a non-standard port for SFTP, 3030. On my inbound ACL I am setting permit tcp any any eq 3030 but the remote SFTP connection is being ...
2
votes
2answers
2k views

Does rsync preserve ACL?

I am using Solaris 9 and planning to go for a Linux OEL 6x now. I will be using rsync for the data movement from Solaris from to Linux server. I am really concerned about the ACL[ FACL- getfacl, ...
0
votes
1answer
294 views

How are these access lists interpreted by the router?

I'm puzzled because I can ssh into this router from 192.168.1.10, but not from 192.168.30.3 (as per acl 6). No interface mentions any of these access lists so am I correct in assuming these are global ...
4
votes
3answers
472 views

Why is ACL not working correctly with this setup?

I am running Arch Linux on my laptop as a development machine, and I need to grant the users group RW privileges to the folder: /srv/http and all files and folders under it. I made sure that ACL is ...
2
votes
0answers
151 views

Ubuntu: How to force default ACLs to take effect for newly created files/dirs?

I've created the following ACLs for a directory: # file: . # owner: www-data # group: root user::rwx user:www-data:rwx user:deploy:rwx group::--- mask::rwx other::--- default:user::rwx ...
1
vote
1answer
459 views

Automating Cisco ACL changes

I've recently started taking on more network management tasks to help our short staffed networking team. I'm very comfortable with network theory and have configured an number of IOS devices, but am ...
1
vote
1answer
169 views

Configuring ACL on CentOS

I'm attempting to configure the following things via an ACL on CentOS 6: Allow UserX to mount any directory without sudo Allow UserX ability to edit /etc/fstab without sudo Having never configured ...
1
vote
1answer
241 views

Configuring a PIX to allow SMTP between DMZ and internal network

I have a Web Server (193.170.4.2) in my DMZ that needs to communicate with the our Exchange Server (10.77.51.87) internally via SMTP. I used access-list acl-dmz permit tcp host 193.170.4.2 host ...
2
votes
2answers
75 views

Linux OEL 6x - Compatibility with ACL

Will the ACL [ Access control lists like getfacl, setfacl ] utility work fine with OEL 6x? It works great with Solaris 5.9 but not sure OEL 6x will support ACL utilities
0
votes
1answer
66 views

Exim: What happens after the “dot” [closed]

I'm using Exim on a Cpanel server, my server is taking too long to process incoming emails after the "dot" ("."). I'm trying to troubleshoot but having a hard time figuring the order of the ACL's ...
0
votes
1answer
389 views

Samba+LDAP acl - anonymous bind?

I have a working Samba PDC that uses OpenLDAP as backend. I am about to set up a samba proxy user and have problems writing the correct secure ACLs. I used this acl: {0}to * by ...
4
votes
1answer
2k views

Share Point ACL on OSX Lion Server - Posix group always takes over ACLs

Trying to configure a share point on a Lion Server machine. The directory is created by the local server admin (serveradmin) and has rwxr-x--- given to it. The serveradmin user belongs to the local ...
0
votes
2answers
672 views

Network shares best practices - Windows environment

We have, at the moment, over 23 mapped network shares, and we are running out of letters. Each network share is nothing else than a folder on a file server (CIFS). We're thinking of mapping one ...
4
votes
1answer
422 views

Firewall ACL management tool

Is there any Firewall ACL management tool which can generate set of ACLs for all my network, including switches, checkpoint, cisco routers, windows, linux etc? I think such tool would make sense as ...
0
votes
1answer
102 views

Network Service Account not Inherited in ACL

I have a problem with files that are being moved into a folder that is set to replace permissions on child objects for the Network Service account. The process is that a media file is uploaded to a ...
2
votes
3answers
939 views

ProCurve ACL to prevent a subnet from leaving the switch

I have a single HP ProCurve 2610 in a remote location that is connected in with the rest of the network via SHDSL. There are two Layer-3 networks on this segment. ACLs are setup to deny one subnet ...
1
vote
1answer
383 views

Folder default ACLs not inherited when new file is created

I'm a bit of a beginner with Unix systems, but I'm running Cygwin on my Windows Server, and I am trying to figure out something related to extended ACLs. I have a directory to which I set the ...
-1
votes
2answers
81 views

solutions for a webserver dedicated to manage permissions/ACL and (reverse) proxying API servers?

I'm considering various layouts to expose various HTTP API services (running on their own differents servers) through a frontend server dedicated to manage permissions on behalf of the API services. ...
-1
votes
2answers
146 views

ACL on /dev/pts

Is it possible to enable ACLs for files under /dev/pts? OS is Gentoo Linux, and the kernel is 3.2.13 with grsec.
5
votes
2answers
689 views

Improved ACL editor for Windows file permissions

I have recently been doing a lot of updates to our network drive permissions... such as consolidating direct user permissions into group permissions. The built-in ACL editor (Advanced Security ...
6
votes
2answers
2k views

Give only Read only rights for Desktop, My document..etc via GPO

I want to accomplish the following task: A user must not have rights to save in his/her Desktop, My Documents, My Music, My video, My picture, etc. I have already prevent & hide all drives via ...
2
votes
2answers
790 views

How to write protect a directory? [closed]

I have some directories and files that looks like this one drwxr-xr-x. 2 ss ss 4096 Oct 3 2004 backup Notice the . in the permissions. The user ss can not delete this directory. Question How ...
2
votes
1answer
198 views

Why do Access Control Lists in IP forwarding use an Inverse Mask?

While I was going through the concept of Access Control, I came upon the fact that ACLs use inverse masks. But while going through the explanation given in cisco site about Contrl lists, I noticed ...
2
votes
1answer
200 views

MSDeploy - possible to call setAcl on multiple destinations in one go?

I'm building a nice little continuous integration environment for our development team, based on TeamCity. It's working rather nicely, as it can build a mix of .NET and PHP projects, and push them to ...
0
votes
1answer
115 views

How can I get ACLs to work?

I have these ACLs for a directory: user::rwx group::rwx other::r-- default:user::rwx default:group::rwx default:group:root:rwx default:mask::rwx default:other::r-- I am logged in as root and type: ...
1
vote
1answer
855 views

LDAP (slapd) ACL issue - can add but not modify entries

I have an issue with the ACL configuration of an LDAP server (slapd). The following ACL entry is active as the first rule that applies: {0}to ...