Questions tagged [setfacl]

setfacl(1) is a command-line utility to set ACL (Access Control List) information on files, part of a withdrawn POSIX draft from 1997

Filter by
Sorted by
Tagged with
1
vote
0answers
48 views

setfacl setting unwanted group execute

I'm pretty sure I'm just doing something wrong, but I can't figure it out... I have some directories I set up with the following: sudo setfacl -dR -m u::rwX,g::rwX,o::rX,u:ubuntu:rwX,u:www-data:rwX,...
0
votes
1answer
103 views

Overwrite directory creation mode using linux acl

I try to give specific user(for example "test") right to read any new created directory. I do that using: undefine@undefine-ThinkPad-T430s:~/test$ getfacl . # file: . # owner: undefine # group: ...
-1
votes
1answer
223 views

setting umask for a directory so that all directories, executable file(.sh , .cmd, .bat) are 750 and regular file 640

need to create and change existing file and directory such that all directories and executable files(*.sh, *.bat, *.cmd ..) are 750 and regular file are 640 . I need to this in shell and python both. ...
0
votes
0answers
9 views

execute permissions in www/html, acls, and files versus directories

for web development, apache2 on debian buster sets acls on /var/www/html > getfacl /var/www/html getfacl: Removing leading '/' from absolute path names # file: var/www/html # owner: www-data # ...
0
votes
1answer
338 views

Samba4: ACLs inheritance: owner group will be changed to “domain users” in new created files/dirs

Samba Version 4.3.11 on Ubuntu Xenial server (16.04) In smb.conf I have: Server role: ROLE_DOMAIN_MEMBER [global] ... inherit permissions = Yes inherit acls = Yes # I needed this due to ...
3
votes
1answer
471 views

How to have multiple users access to chmod() the same file?

I have a system where multiple users are running an application that chmod the same file. I've tried using setacl to add both users as user owners of the file to do this, but it doesn't work. The ...
2
votes
1answer
430 views

Make www-data the owner and group of newly created files and folders

I am running Ubuntu 16.04. I have several users that are within the www-data group and will be creating/modifying files on the server. We'll call them user1 and user2. Any time user1 or user2 ...
1
vote
1answer
626 views

How to use setfacl on ZFS dataset to set the equivalent of UNIX-style chmod 770?

I'm trying to use setfacl to set the permissions of different ZFS datasets, and I want those ACL permissions equivalent to UNIX-style chmod 770. What setfacl command could accomplish this, and what ...
4
votes
1answer
680 views

How to give write permissions using setfacl while retaining existing permissions?

I want to give write permission to a specific user on a dir recursively without loosing any existing permissions that the user may have. I believe I can use something like this to give write ...
1
vote
1answer
484 views

Why is my unix socket created with a different ACL mask to other files?

I am deploying an Nodejs Express app. It is going to run as on the same box as an Nginx server, which will proxy requests to it via a unix socket. The question is not specific to Nodejs, however. The ...
0
votes
1answer
248 views

ACL: giving - - - permissions for the owner of the file

At the beginning, I have these permissions for a file: # file: jar # owner: my_user # group: my_user user::rw- group::rw- other::r-- After running this: setfacl -m u:my_user:--- jar and get this ...
0
votes
1answer
989 views

Cannot access files in docker as a non-root user 777 permissions + facls

I have a docker container with a web app. Apache cannot read to the log folder. The apache user has specific rwx on the facl folder. I set 0777 on the folder recursivelyinside and outside the ...
2
votes
1answer
174 views

How can I set up a filesystem directory to *always* be group writable?

I have a Linux file server with some shared directories. These directories are sometimes accessed over SFTP, and sometimes by users with shells. Regardless of how these directories are accessed, I ...
0
votes
1answer
256 views

setfacl issue on subdirs created by server

I'm facing issues on inheriting the parent permissions for the folders created by PHP script which is executed by the server. I've created the deployer user, added to www-data group and set the ...
0
votes
3answers
160 views

Convenient WordPress Web Directory Permissions?

I'm setting up a webserver for WordPress. WordPress requires it's stuff to be owned by www user or it has problems installing plugins and themes (asks for server FTP credentials, it's stupid, I know)...
3
votes
0answers
542 views

Setfacl: Removing ACL make my file executable

I'm making a script to add and remove ACL for third party unix account. Adding ACL works like a charm. Removing works but make a file created by sub-users executable. See: ~/test$ mkdir directory ~/...
3
votes
1answer
666 views

Setting default permissions on newly created files/folders [closed]

I have a network of sites where all sites share same "images" folder. I have created /home/_images/entities and symlinked it from all websites, and it works great with Apache, when I open /images/ on ...
0
votes
1answer
73 views

Local “incoming” dir

I need to create a directory on a Linux server where users can "submit" files, similar to the incoming directory on an ftp server. (Where they would not be viewable after submission.) Specifically, ...
4
votes
1answer
159 views

mkdir -p ignores facl?

I am trying to enforce file perms of 777 across a specific set of dirs. I used "setfacl -m d:o::rwx" and got what appears to be the right permissions $ getfacl . # file: . # owner: blah # group: ...
1
vote
1answer
2k views

Logrotate: Postrotate setfacl failed with no such file or directory error

I set some extended ACL entries for /var/log/squid3/ and /var/log/squid3/access.log. sudo setfacl -m u:jetty:r-x,g:adm:r-x /var/log/squid3 sudo setfacl -m u:jetty:r--,g:adm:r-- /var/log/squid3/...
0
votes
1answer
1k views

which is better, setfacl or chmod +a? [closed]

I have been working with Ubuntu for a year or so. Just the other week I have started to learn the Symfony framework which works faster with the ACL. In the installation and configuration of Symfony (...
1
vote
1answer
700 views

setfacl for all users

Is it possible to set the permission for all users or all groups that are present in the acl? Namely, I would like a command that applies permissions uniformly for all members of an entity type, ...
5
votes
1answer
5k views

Have new files inherit their folder's extended ACLs

We are moving our web files from AFS to a local volume with the acl flag set. We use extended ACLs for our permissions so users can edit different parts of our websites. In AFS, when you create a new ...
2
votes
0answers
351 views

Default owner and setting sticky bit by default

I have a RHEL 5.5 server and want to set up some specific security for a directory: Please note that I am not asking how to do this one time... that has already been done. I want all new directories ...
0
votes
1answer
254 views

Give read/write permission of group files to a user

How can I use setfacl to allow a user to have read/write permission on the home directory of any user that belongs to a certain group?
40
votes
4answers
59k views

linux/setfacl - Set all current/future files/directories in parent directory to 775 with specified owner/group

I have a directory called "members" and under it there are folders/files. How can I recursively set all the current folders/files and any future ones created there to by default have 775 permissions ...
4
votes
2answers
2k views

setfacl equivalent to chmod for setting/unsetting individual flag

Using setfacl command line arguments, is there a way to set/unset a single flag as the following command will do ? chmod g+x FILE Please note that: setfacl g::x FILE setfacl g::--x FILE are ...
1
vote
1answer
8k views

ACL multiple default groups?

With Linux ACL, can you have multiple groups with default access to a folder? I want this for sharing code repositories between different coding groups + several processes. My thinking is, if a user ...