An acl, or Access Control List, is part of a security technology which employs a list of object access permissions for each user who can access that object. The term is used in several common implementations ranging from the Microsoft Windows NTFS filesystem to Cisco Internet firewall device rules.

learn more… | top users | synonyms

20
votes
7answers
17k views

How to workaround the NTFS Move/Copy design flaw?

As anyone that has dealt with file server permissions is aware, NTFS has an interesting design feature/flaw known as the Move/Copy problem. As explained in this MS KB article, the permissions for a ...
5
votes
3answers
5k views

Can I override my umask using ACLs to make all files created in a given directory world readable?

Assume that my umask is 0077. I have a directory, foo, that I want to have special permissions applied to it. All files I create in foo should be world readable, and all directories should be world ...
3
votes
6answers
4k views

Software to build report of NTFS permissions

Is there any software that can scan through an NTFS file system and generate an easy to read report of NTFS permissions?
7
votes
1answer
6k views

setfacl: x.txt: Operation not supported

What I did and what it did: > getfacl x.txt # file: x.txt # owner: cwhii # group: cwhii user::rw- group::r-- other::r-- > groups cwhii adm dialout cdrom plugdev lpadmin admin sambashare > ...
1
vote
2answers
2k views

How to prevent file owner from changing/deleting their own file? Linux CentOS

This is NOT your standard "how do permissions work" question! I'm thinking the answer will probably involve ACL, but I don't know how exactly. I've messed around with standard permissions, guid, ...
6
votes
5answers
10k views

Resetting NTFS Permissions Disk Wide

Someone messed up majorly in setting permissions on an NTFS drive and I'm looking at a way to reset all permissions to default. The OS will be reinstalled but I'm trying to salvage data from their ...
6
votes
3answers
6k views

linux/setfacl - Set all current/future files/directories in parent directory to 775 with specified owner/group

I have a directory called "members" and under it there are folders/files. How can I recursively set all the current folders/files and any future ones created there to by default have 775 permissions ...
2
votes
1answer
708 views

Default permission for newly-created files/folders using ACLs not respected by commands like “unzip”

I am having trouble with setting up a system for multiple users accessing the same set of files. I've read tuts and docs around and played with ACLs but haven't succeeded yet. MY SCENARIO: Have ...
8
votes
7answers
5k views

Why does cp not respect ACLs?

A common way to set up a directory for file sharing within a group, is: $ mkdir foo $ chgrp felles foo $ chmod g+ws foo $ setfacl -m group:felles:rwx foo $ setfacl -dm group:felles:rwx foo This ...
4
votes
2answers
2k views

Why does chmod(1) on the group affect the ACL mask?

I am trying to understand this Unix behavior (which I happen to be testing on Ubuntu 11.10): $ touch foo $ setfacl -m u:nobody:rwx foo $ getfacl foo # file: foo # owner: michael # group: michael ...
8
votes
3answers
1k views

What good Active Directory + Exchange competition is there?

Based on this question regarding enhanced permission support in filesystems, what is the best permissions + directory and mail stack to compare against Active Directory on NTFS with Exchange? I'm ...
3
votes
2answers
2k views

How can I check access of a Group/User in AD before I delete it?

I'm cleaning up an inherited domain that is not well documented. How can I check that a particular group or user has no ACEs across the AD? Things like searching DACL/SACL for AD objects and file ...
2
votes
1answer
171 views

managing and auditing existing cisco firewall access control and routing rules

I'd like to perform audit and maintenance of the existing cisco router and switch configuration before changing to the new ISP and implementing new VLAN features, how do you manage and audit your ...
0
votes
3answers
726 views

rsynced files not getting proper ACL

I use rsync (rsync-3.0.6-5.el6_0.1.x86_64 on Scientific Linux 6) to transfer files from a VFAT disk to an NFS mounted ext3 file system. I have ACLs set up on the ext3 system and all works as expected ...
0
votes
1answer
649 views

How do I configure Squid Proxy located at a different location to route internet traffic?

I have a Linux box (Ubuntu 9.10) at a different location. I installed squid proxy and tried using that IP and port (opened 3128 at that location) in Firefox. I can't get it to work. My current ...
0
votes
1answer
7k views

Haproxy ACL for balance on URL request

I'm usung Ubuntu with haproxy 1.4.13 version. Its load balancing two subdomains: app1.domain.com app2.domain.com now i want to be able to use ACL to send based on url request to the right ...
0
votes
1answer
164 views

Cisco 877 ISR - Joining to another local network

At a remote site I have a Cisco 877 ISR providing network services (DHCP, DNS, internet, VPN back to base). I need to connect it to another companies LAN at the remote site to allow uses to print on ...
3
votes
1answer
911 views

Exim4 - temporarily freeze outgoing emails from specific user

I need to temporarily freeze outgoing emails from specific sender with exim4. The sender logs in with remote SMTP (i.e. over TCP/IP). What I want to do is to freeze (but not deny) all his emails so I ...
3
votes
2answers
275 views

What filesystem comes closest to matching NTFS for support of ACLs, and highly-granular permissioning?

It seems that most other filesystems handle the basic *nix permissions (ugo±rwx), with maybe an addition here or there. Or can be "made" to handle ACLs through the use of other tools on top of ...
0
votes
1answer
882 views

Windows ACL during explorer copy

I need to prevent the acl subtitution during folder copy and I don't know how to do. I have two repositories, the source and the destination with different acl. Users have to copy (with windows's file ...
0
votes
1answer
298 views

Cisco IOS ACL: Don't permit incoming connections just because they are from port 80

I am going much based on my memory and I may not be correct on all of this. On a Cisco 851 (IOS) that uses a BVI or a bridge-route (the servers on the inside are configured with static and public IP ...
0
votes
1answer
118 views

oddities in interference of linux extened ACLs and 'regular' permissions

I've got some legacy code which checks that some file is read-only and readable only by it's owner, i.e. permissions set to 0400. I also need to give read-only access to this file to some other user ...
-2
votes
1answer
272 views

File base permissions are 666, why and is this a configurable value? [closed]

It is specified in various documentation on the net that linux/unix file base permissions are 666 with regards to how umask manipulates. This is also relevant with regards to the fact that default ...