An acl, or Access Control List, is part of a security technology which employs a list of object access permissions for each user who can access that object. The term is used in several common implementations ranging from the Microsoft Windows NTFS filesystem to Cisco Internet firewall device rules.

learn more… | top users | synonyms

3
votes
0answers
24 views

Recommended Permissions for Virtual Service Accounts on Windows 7+

I'm trying to have an NSIS Installer install a custom service as part of an installation. It would be nice to run the service with one of those typical 'NT Service\xyz' style virtual service accounts ...
3
votes
0answers
169 views

Cannot set ACL on ACL-enabled EXT4 partition

I am trying to enable xattrs and acls on a Debian machine. I've (re)mounted the partition in question with user_xattr and acl. (/dev/md3 is the partition in question) root@fs01:/# mount | grep ...
3
votes
0answers
244 views

What Samba settings to use for perfect emulation of Windows ACLs

Can anyone suggest what settings I should use with Samba to get full support for Windows ACLs? At the moment I have the following configuration: /etc/fstab: acl,user_xattr ...
2
votes
0answers
95 views

Windows security: default owner configurable?

The "How owners are assigned and set" Technet article is stating: By default, a new object's owner is the security principal identified as the default owner in the access token attached to the ...
2
votes
0answers
51 views

find nouser equivalent for POSIX ACLs

On a Linux system it is possible to find files that are owned by a uid that does not have a user name assigned with "find -nouser". I have been looking for an equivalent that will search the POSIX ...
2
votes
0answers
34 views

Mercurial storing metadata on OS X

I was searching for convenient incremental snapshot & rollback & show-what-changed solution for my OS X boxes, and ended with simple yet powerful idea — why not create Mercurial repository at ...
2
votes
0answers
67 views

access control list not working on folders

ive got a problem with setting up access control lists for a folder that i want a single user to be able to edit, the permissions were set with the command setfacl -R -m u:mik:rwx ...
2
votes
0answers
661 views

How to configure SAMBA file server to be a windows look-alike?

I'm using an openfiler appliance in an Active Directory (W2k8R2 DC) environment. I would like to make my shares as quite as possible look like windows shares for my users. Most things work well but ...
2
votes
0answers
515 views

Folder shares over NFSv4 private to user groups

I want to share a folder over NFSv4, available to some users, and I'm having permission issues. I set up the folder permissions with setGID so new files are created with the folder group owner. But ...
2
votes
0answers
195 views

Ubuntu: How to force default ACLs to take effect for newly created files/dirs?

I've created the following ACLs for a directory: # file: . # owner: www-data # group: root user::rwx user:www-data:rwx user:deploy:rwx group::--- mask::rwx other::--- default:user::rwx ...
2
votes
0answers
399 views

NFS inherit permissions from shared directory - Mac OS client

Short question: Is there a way to have files on a NFS share on a Mac OS client inherit the permissions of the shared directory? Scenario: Ubuntu 12.04 server Mac 10.7.4 client shared directory has ...
2
votes
0answers
4k views

Can't reset Windows 7 Registry permissions

I am trying to reset win 7 registry permissions using secedit /configure /cfg %windir%\inf\defltbase.inf /db defltbase.sdb /verbose /areas REGKEYS But i am receiving the following error: An ...
1
vote
0answers
22 views

PHP temp uploaded files are not deleted on IIS due to 'Access Denied' for IUSR

When uploading a file by a HTML form to a PHP script, the uploaded file will remain in upload_tmp_dir, even when the request ended and this file was not removed explicitly by the PHP code. Expected ...
1
vote
0answers
28 views

Haproxy: reject traffic by user agent from file

I am trying to reject connections from specific user agents (by matching a substring of the user-agent header) using an haproxy ACL with -f option to read from a file. However it is not working, it ...
1
vote
0answers
46 views

Recalculate Windows inherited ACLs for hardlinks

How do I get Windows to recalculate the inherited permissions of a file? A tool (Mercurial) created multiple NTFS hardlinks to the same file from different directories. I can see them using fsutil ...
1
vote
0answers
37 views

squid apply rules to a some users

Good day: I have a squid 2.7 stable9 installation that works. It is connected to LDAP and the users can authenticate perfectly. I have different rules for instance to block a few websites during ...
1
vote
0answers
109 views

How can I add ACL entry comments on a Cisco 3750?

I'm trying to find the best way to add comments into my access-lists. For the moment, the only maneer I found is the following one: switch#conf t switch(config)#ip access-list extended VLAN-TEST3 ...
1
vote
0answers
284 views

Sharing a folder through NFSv4 and Samba on Ubuntu

I encountered problem with configure samba server above nfsv4. I have 2 servers with Ubuntu 12.04 on both of them. First server serve as NFSv4 storage, for VDI and user shares. File system is ext4. ...
1
vote
0answers
75 views

Samba file mask calculation on ACL - missing r

I would like to ask a detail how samba deals with permission on ACL on servers. I did dig very hard and deep but no luck with this one. I have set ACL support over this think and again, regardles of ...
1
vote
0answers
143 views

Default owner and setting sticky bit by default

I have a RHEL 5.5 server and want to set up some specific security for a directory: Please note that I am not asking how to do this one time... that has already been done. I want all new ...
1
vote
0answers
251 views

ACL mask assigned when a group member creates files/directories on a Samba server from Windows effectively make them read-only

Home directories are shared by Samba running on CentOS 6.3 with the following configuration: [homes] comment = Home Directories read only = No inherit acls = Yes ...
1
vote
0answers
51 views

Can Squid3 access PHP Helpers

Can Squid3 use PHP helper programs other than for ACL and redirect? I need Squid to use a PHP program (with mysql access) to set the parent proxy that should be used for a particular connection, so ...
1
vote
0answers
190 views

Sharing a folder through NFSv4 and Samba

I have some trouble getting the proper access right to work for a folder shared through samba and nfs. Connected like this: ┌────────────┐ ┌──────────────┐ ┌──────────────┐ │ NFS-Server ├────┤ ...
1
vote
0answers
3k views

HP Procurve 2910AL allow traffic from VLAN to VLAN

We are trying to setup so that the switch handel routing and communication between a few vlans. And then have a link network up to the fw. Here is the config: Running configuration: ; J9145A ...
1
vote
0answers
147 views

Apache not working with Linux ACL

I'm having a big problem with Apache and ACL. I have two servers, both running CentOS 6.3, but the first one is running CPanel/WHM and the second one is just Apache, ACL and Samba for local sharing. ...
1
vote
0answers
483 views

Squid Random Shared ip proxy

Running Squid with a acl random ip setup, Have 745 ip's in the pool and we are about 10 users that use it with tools that are running multiple threads, Check rankings on Google etc Issue: We did ...
1
vote
0answers
316 views

Squid 3.1: external_acl_type ttl won't work

I have custom script for handling Squid3's external_acl_type and it works fine. In this script (btw, its PHP) I turned on logging every request into the file. As far as I know from docs TTL value ...
1
vote
0answers
189 views

Can I make an ACL in squid for transparent connections?

I have a squid proxy that transparently intercepts connections from an internal network, and is explicit for connections from another network. I want to use authentication for the external network, ...
1
vote
0answers
313 views

NFSv4 ACLS vs NFSv3 KRB5 - problems - alternatives?

So NFSv4 acls don't ignore the umask as far as I can tell. And nfsv3 with kerberos has its own host of problems (with autofs - race conditions with pam). So if we want to use an nfs like system with ...
1
vote
0answers
275 views

Periodically completely lose access to a file (cannot take ownership) in Win 2k8 R2

Running Win 2k8 R2 SP1 64 bit as a web server box with IIS 7/.NET 4. Periodically, I completely lose access to the membership database in one of my sites (ASPNETDB) which causes a "Network Service ...
1
vote
0answers
229 views

Is there a convenient UI to control squid acls?

I'm looking for a convenient way to control access controls (specifically, to block URLs based on regex matching) of a squid server running on OS X. I checked out webmin and it seems incredibly ...
1
vote
0answers
205 views

Combining IP access control with digest authentication in Apache

I want to restrict access to a given site based on two criteria: The IP address of the client (i.e. is it within an allowed range) and; Digest authentication. However, for each range of IPs there ...
1
vote
0answers
131 views

Managing permissions for shared folders on linux the same way we do it in Windows 2003 server

I have a usual file server on windows 2003 server. The users are organized in the active directory per OU, each OU has different access rights to the shared folders. They're all using Windows XP / ...
1
vote
0answers
422 views

AFP AD ACL permissions issues with external drive

Mac OS X Server 10.4.11 connected to an AD domain system serving AFP shares to Mac OS X 10.5.8. If I create a share on the the internal RAID of the server with an ACL that allows RW to all ("Domain ...
0
votes
0answers
26 views

Windows: “No permissions have been assigned for this object” - damaged permissions / ACL

We occasionally observe damaged filesystem ACLs. The dialog shows then this message: No permissions have been assigned for this object. Warning: this is a potential security risk because anyone who ...
0
votes
0answers
27 views

ACL settings not being inherited properly when creating sub directory

I am trying to extend ACLs across sub directories that are being created under a parent but for some reason one of my groups is being switched to #effective r-x and the mask is being changed. Any ...
0
votes
0answers
93 views

Allow some destination ip/hostnames to bypass acl in squid

We have setup squid for an office environment. We are blocking many multimedia file types like mp3, mp4 etc to prevent bandwidth misuse. Now we have setup media streaming server on our gateway server ...
0
votes
0answers
18 views

RNDC is not reloading my ACL list in Bind, how can I make it reload without losing Cache?

I have two ACL's, one expired, and one authorized. When I make a change to the ACL and try: rndc reload and rndc reconfig I do not see that the ACL was refreshed. Any ideas?
0
votes
0answers
39 views

Deny access from from/to subnet

We are running a VPC on Amazon. Our main network is 192.168.0.0/16 We have a subnet at 192.168.1.0/24 Two subnets which are entrypoints for our VPNs at 192.168.2.0/24 and 192.168.3.0/24 And more ...
0
votes
0answers
94 views

Allow ELB healthcheck against nginx but block proxied connections

I have a daemon process that polls a page to monitor system status, as long as everything is happy magic_check.html will exist. As soon as something goes down the file is deleted. I have the AWS ELB ...
0
votes
0answers
996 views

freenas windows acls folder permissions

We have FreeNAS-9.2.1.3-RELEASE-x64 providing a samba share to IIS (hosted by 2012 R2, if that's relevant) ssasan01# smbd --version Version 4.1.6 The freenas server is joined to an AD provided by ...
0
votes
0answers
41 views

Partition does not mount with ACL option

Debian 7.5 : Installing package acl I've edited /etc/fstab and added the acl option to / I've remunted the partition to avoid reboot by doing sudo mount -o remount,acl / Problem : The mount command ...
0
votes
0answers
333 views

Cisco ASA + FreeRadius: Downloadable ACL configuration

VPN users that are using FreeRadius are having access to all VLANs. VPN users using local authentication have local ACLs applied to their access. I need to know what configuration change I need to ...
0
votes
0answers
304 views

CygWin SSH server and “StrictModes” via Windows ACL

I have successfully set up the SSH server in a CygWin installation on Win2k3. It works properly through both password authentication and public/private keys. However, once I set 'StrictModes' in ...
0
votes
0answers
33 views

Program / Service to Allow Multiple Users to use a Single Shared Account

I've found it very common for teams to share a single username / password for online services, such as domain registrars. Clearly, giving multiple people access to a single account by passing around ...
0
votes
0answers
49 views

windows 2003 Terminal server, “users” item removed from ACL of “HKLM\SOFTWARE\Classes”

After having installed a software on my Windows 2003 terminal server, no user has been able to launch applications anymore. When they log to the server via remote desktop, each icon they click ...
0
votes
0answers
31 views

NFSv4 ACL with directory create perm, but can not read/write files under the directory

Next is what I need to do: Two users admin-x as directory administrator, user-m as the data producer, user 1: admin-x user 2: user-m In the directory named '/share' which with nfsv4 acls set on it, ...
0
votes
0answers
301 views

No acl on nfs mount in RHEL6?

I have several RHEL6 machines. One is exporting an nfs mount to the rest. I have ACL's set on the server (set using setfacl -m), but none of the clients are seeing any of them. Here is my export on ...
0
votes
0answers
154 views

Applying exim ACL to mail from backup server

I use exim as a mail server. To combat spam, I have a catch-all email address, and use a custom email address for every service I sign up to. If they leak my address to a spam list, I can just block ...
0
votes
0answers
59 views

GitHub Enterprise ACLs

Is there a way to do github repos acls on the branch level? Or only on repositories level? Sorry might be a very easy answer, but I can't find the answer in their documentation.