An acl, or Access Control List, is part of a security technology which employs a list of object access permissions for each user who can access that object. The term is used in several common implementations ranging from the Microsoft Windows NTFS filesystem to Cisco Internet firewall device rules.

learn more… | top users | synonyms

2
votes
1answer
45 views

Per URI based ACL for IIS?

I have ASPX website running on Windows 2008 R2, I want to limit the access for several interfaces, but not all of them. e.g I have an interface /admin for website www.contoso.com, but I only want ...
0
votes
0answers
467 views

Squid Proxy Splash page always showing up

I am further along with using Squid to present a splash page to guest users, and I wrote a basic HTML splash page to be presented to users. I wrote the Splash page HTML to grab the url from Squid ...
-2
votes
1answer
145 views

Cisco Switch VLAN vs ACL [closed]

I am trying to create a VLAN in which my PS3 can access a remote PC that feeds it video. I want my PS3 not to be able to communicate to the internet, and be able to move that remote PC into the same ...
1
vote
1answer
577 views

How set ZFS ACL permissions on CentOS 6

I use last ZFS (ZFS for Linux) on the CentOS 6. Create successfully pool, all working fine. But i have one question. How i can set ACL for ZFS folder/file? GNU ls, chmod, and other coreutils not ...
0
votes
1answer
291 views

CSS files in subfolders : 401 errors after porting webapp to new server running IIS7.5

We moved our webapp from Windows 2003 Server to Windows 2008 R2 IIS7.5. CSS isn't working. The CSS file is being linked in this manner: <head> <style type="text/css" ...
0
votes
3answers
1k views

How to set acl on my fstab file?

I would like to enable acl on my remote server. So I type the following command df to know on which partition I am : Here is the result : Filesystem 1K-blocks Used Available Use% Mounted on ...
0
votes
1answer
250 views

setfacl not working on my Web directory

On Debian 7.0 I've setup filesystem access control lists on my mount mx:/srv/www$ mount | grep acl /dev/xvda on / type ext3 (rw,relatime,errors=remount-ro,acl,data=ordered) Now I simply want newly ...
1
vote
1answer
615 views

(EXIM) ACL for only allowing internal domain to send to internal group alias

I'm trying to create an ACL rule that will only allow internal users/white listed users to send to particular group aliases such as all@ or office2@ I know I need something similar to: deny ...
0
votes
1answer
996 views

Windows ACL during explorer copy

I need to prevent the acl subtitution during folder copy and I don't know how to do. I have two repositories, the source and the destination with different acl. Users have to copy (with windows's file ...
2
votes
1answer
397 views

Generate icacls script of permissions

I am looking for a utility to which I can specify a directory to be recursively scanned. The utility should generate a batch file consisting of calls to icacls to reproduce the file and directory ...
-1
votes
1answer
200 views

Risks of Authenticated Users group assigned by default [closed]

I have noticed that Windows seems to give all Authenticated Users powerful rights (Modify) propagated from the root of the drive. Suppose you create a folder under the root and do not adjust its ...
2
votes
2answers
195 views

How do I find where packets are coming from that are being blocked by an ACL?

I have an ACL to prevent regular workstations from accessing the management vlan on our switch. Every 5 minutes we get the following log entry: %SEC-6-IPACCESSLOGS: list mgtvlan-acl denied 0.0.0.0 ...
-1
votes
1answer
450 views

Tunneling specific webserver port on localhost using SSH

It is possible allow website surfing running on a specific port (10000) only accessing it trough SSH tunnel? Real case: Apache is running on port 80 for http and 443 for https, anyone can surf all ...
1
vote
1answer
166 views

Simple ACL not working

Network: Cisco 2921. Two subnets. 192.168.1.0/24 and 2.0/24. For some reason I can't get inter-subnet communication. I bound an ACL with the following statements to the inbound interface of each ...
2
votes
0answers
36 views

Mercurial storing metadata on OS X

I was searching for convenient incremental snapshot & rollback & show-what-changed solution for my OS X boxes, and ended with simple yet powerful idea — why not create Mercurial repository at ...
2
votes
0answers
68 views

access control list not working on folders

ive got a problem with setting up access control lists for a folder that i want a single user to be able to edit, the permissions were set with the command setfacl -R -m u:mik:rwx ...
3
votes
0answers
249 views

What Samba settings to use for perfect emulation of Windows ACLs

Can anyone suggest what settings I should use with Samba to get full support for Windows ACLs? At the moment I have the following configuration: /etc/fstab: acl,user_xattr ...
1
vote
0answers
265 views

ACL mask assigned when a group member creates files/directories on a Samba server from Windows effectively make them read-only

Home directories are shared by Samba running on CentOS 6.3 with the following configuration: [homes] comment = Home Directories read only = No inherit acls = Yes ...
1
vote
0answers
55 views

Can Squid3 access PHP Helpers

Can Squid3 use PHP helper programs other than for ACL and redirect? I need Squid to use a PHP program (with mysql access) to set the parent proxy that should be used for a particular connection, so ...
1
vote
1answer
387 views

Setting per-directory umask using ACLs

We want to mimic the behavior of a system-wide 002 umask on a certain directory foo, in order to ensure the following result: All sub-directories created underneath foo will have 775 permissions All ...
2
votes
1answer
1k views

(Powershell) Method to return a list of groups where a specific user has 'write member' security

We use a piece of web-based software that users can log on to in order to manage access to shares controlled with AD groups. The list of groups a user can manage are the groups on which they have ...
5
votes
3answers
555 views

What is the ZFS ACL limit?

Does anyone know how many user ACL's ZFS can handle? With other words: for how many users can I set ACL's like this one for the same directory? setfacl -m user:test1:rwxpDdaARWcCos:fd----:allow ...
0
votes
1answer
1k views

How to whitelist external access to an internal webserver via Cisco ACLs?

This is our company's internet gateway router. This is what I want to accomplish on our Cisco 2691 router: All employees need to be able to have unrestricted access to the internet (I've blocked ...
0
votes
3answers
805 views

rsynced files not getting proper ACL

I use rsync (rsync-3.0.6-5.el6_0.1.x86_64 on Scientific Linux 6) to transfer files from a VFAT disk to an NFS mounted ext3 file system. I have ACLs set up on the ext3 system and all works as expected ...
0
votes
1answer
502 views

Cisco ASA 8.2 ACL For NAT

Sadly I have gone back in time to ASA 8.2(5)33 which I am not so familiar with. I have configured NAT between two interfaces but traffic isn't passing becasue I can't get the ACL to work; (The full ...
2
votes
1answer
856 views

Default permission for newly-created files/folders using ACLs not respected by commands like “unzip”

I am having trouble with setting up a system for multiple users accessing the same set of files. I've read tuts and docs around and played with ACLs but haven't succeeded yet. MY SCENARIO: Have ...
2
votes
0answers
691 views

How to configure SAMBA file server to be a windows look-alike?

I'm using an openfiler appliance in an Active Directory (W2k8R2 DC) environment. I would like to make my shares as quite as possible look like windows shares for my users. Most things work well but ...
2
votes
2answers
1k views

Cisco IOS router config — how to disable SSH / SNMP on all but loopback address?

Sorry for the naive question; a quick reading of the cisco docs doesn't answer this question... So I've got a router (say for the sake of argument a 4500 running IOS 15.x) It has interfaces in 3 ...
2
votes
2answers
1k views

How to setup NTFS ACL with Acces Based Enumeration

We're in the process of migrating from Novell Netware to Windows 2K8 R2 infrastructure (AD, File server, print server... etc) My question is about ACL. While Netware and Windows are totally ...
3
votes
1answer
590 views

Does NFSv3 respect ZFS ACL's?

NFSv3 of course doesn't support ZFS ACL's, but what will happen if I have the following setup?: +-----------------------------------------+ +-------------+ | FreeBSD ZFS serv1 ...
1
vote
2answers
2k views

How to prevent file owner from changing/deleting their own file? Linux CentOS

This is NOT your standard "how do permissions work" question! I'm thinking the answer will probably involve ACL, but I don't know how exactly. I've messed around with standard permissions, guid, ...
-1
votes
1answer
918 views

How to get ACL working in CentOS?

I have this line in fstab: /dev/sda3 / ext3 defaults 1 2 I supposed I should change it to: /dev/sda3 / ext3 defaults,acl 1 2 I also suppose I should run: mount -t ext3 -o acl ...
1
vote
2answers
4k views

How to make security group in one forest show up in another forest?

I have two Win2k8 forests which I do maintenance on. The two forests have full 2 way external, non transitive trust with each other. I have a folder in forest X, domain countryX.mycompany.com ...
6
votes
3answers
7k views

linux/setfacl - Set all current/future files/directories in parent directory to 775 with specified owner/group

I have a directory called "members" and under it there are folders/files. How can I recursively set all the current folders/files and any future ones created there to by default have 775 permissions ...
1
vote
2answers
843 views

My facebook blocking ACL has stopped working

This probably very simple. This was setup before I arrived, and has been working to block facebook. I recently eliminated some static port forwarding on this 2691 (as in, I don't think anything else ...
1
vote
0answers
191 views

Sharing a folder through NFSv4 and Samba

I have some trouble getting the proper access right to work for a folder shared through samba and nfs. Connected like this: ┌────────────┐ ┌──────────────┐ ┌──────────────┐ │ NFS-Server ├────┤ ...
0
votes
2answers
311 views

Can a typical firewall appliance handle things like throttling requests per user (per IP)?

I'm intending to purchase a Cisco ASA 5510, but am wondering whether or not I should expect to be able to do things such as mentioned in the question title with a typical firewall (or specifically ...
0
votes
1answer
823 views

Forcing Linux Permissions Stickybits or ACLs

I have a question/confusion regarding forcing inherited permissions on Linux (namely CentOS 6) The Setup: 1 x CentOS File Server 2 x CentOS NFS Clients Lots x Windows Samba Clients The file share ...
1
vote
0answers
3k views

HP Procurve 2910AL allow traffic from VLAN to VLAN

We are trying to setup so that the switch handel routing and communication between a few vlans. And then have a link network up to the fw. Here is the config: Running configuration: ; J9145A ...
1
vote
0answers
149 views

Apache not working with Linux ACL

I'm having a big problem with Apache and ACL. I have two servers, both running CentOS 6.3, but the first one is running CPanel/WHM and the second one is just Apache, ACL and Samba for local sharing. ...
1
vote
0answers
497 views

Squid Random Shared ip proxy

Running Squid with a acl random ip setup, Have 745 ip's in the pool and we are about 10 users that use it with tools that are running multiple threads, Check rankings on Google etc Issue: We did ...
0
votes
1answer
426 views

Windows ACL inheritance issues for FTP server and automated tools

I have set up Cerberus FTP server. By default, Cerberus FTP service runs under SYSTEM ACCOUNT. Also I have some console applications which run as scheduled tasks. They are running under a dedicated ...
1
vote
0answers
325 views

Squid 3.1: external_acl_type ttl won't work

I have custom script for handling Squid3's external_acl_type and it works fine. In this script (btw, its PHP) I turned on logging every request into the file. As far as I know from docs TTL value ...
2
votes
1answer
315 views

Setfacl configuration issue in Linux

I am configuring a Linux Server with ACL[Access Control Lists]. It is not allowing me to perform setfacl operation on one of the directoriy /xfiles. I am able to perform the setfacl on other ...
2
votes
2answers
232 views

Preferred method for allowing unprivileged UNIX/Linux users to view syslog information

I have some non-privileged "role accounts" that need the ability to view [some of] the local syslogs (eg. /var/log/messages) for debugging purposes. This is explicitly local log data, not remote ...
1
vote
1answer
297 views

Cygwin: how do I disable /cygdrive

I'm using a cygwin based SSHD server and I want to disable the /cygdrive/c and /cygdrive/d paths; is this possible? Using NTFS ACLs to achieve this will be a mess because the user will need access to ...
1
vote
1answer
757 views

NFSv3 + ACL: mask is gone on clients

I'm sharing a NFS folder among a user group. The default umask on the clients is 0700, and this is a problem because newly created files won't be readable/writable by another users. So, I'm using ...
0
votes
1answer
378 views

Samba share for user groups with Ubuntu. A user can't access files created by other users

I have a folder mounted by using NFS on the server. That folder has subdirectories, and I want to share specific folders to specific user groups by using SAMBA. It doesn't work as expected, because ...
0
votes
2answers
303 views

How to access data in different userhomes from a single non-root user

I have Owncloud on my server running, and it saves uploaded files unter /home/uid/files. But Apache is running as a non-root user, and it can't access(write) the files under /home/uid/files. What is ...
2
votes
0answers
530 views

Folder shares over NFSv4 private to user groups

I want to share a folder over NFSv4, available to some users, and I'm having permission issues. I set up the folder permissions with setGID so new files are created with the folder group owner. But ...