Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [setfacl]

setfacl(1) is a command-line utility to set ACL (Access Control List) information on files, part of a withdrawn POSIX draft from 1997

setfacl(1), short from Set File ACL, is a command-line utility in some modern UNIX systems that lets the user set access control information on the specified files.

It was part of an abandoned and withdrawn IEEE Standards Draft from 1997, originally meant to be part of .

35 questions
1
vote
1 answer

UNIX ACL Permissions Different when file is copied from Windows Explorer compared to unix cp command

Please share your inputs on the following scenario. Unix Path 1. Permissions for /source/dir1/test.txt are -rw-rw----+ Scenarios Case 1: When this file is copied from Windows Explorer to the path /source/dir2 permissions become read only for the…
Jolly J
  • 21
  • 2
1
vote
1 answer

ACL: giving - - - permissions for the owner of the file

At the beginning, I have these permissions for a file: # file: jar # owner: my_user # group: my_user user::rw- group::rw- other::r-- After running this: setfacl -m u:my_user:--- jar and get this permissións: # file: foobar # owner: my_user #…
tirenweb
  • 203
  • 1
  • 3
  • 11
1
vote
1 answer

Cannot access files in docker as a non-root user 777 permissions + facls

I have a docker container with a web app. Apache cannot read to the log folder. The apache user has specific rwx on the facl folder. I set 0777 on the folder recursivelyinside and outside the container. Inside the container only root can read the…
Justin Dearing
  • 1,037
  • 12
  • 33
1
vote
1 answer

Logrotate: Postrotate setfacl failed with no such file or directory error

I set some extended ACL entries for /var/log/squid3/ and /var/log/squid3/access.log. sudo setfacl -m u:jetty:r-x,g:adm:r-x /var/log/squid3 sudo setfacl -m u:jetty:r--,g:adm:r-- /var/log/squid3/access.log Because the log is under daily rotation I…
user3365917
  • 13
  • 1
  • 3
1
vote
1 answer

setfacl for all users

Is it possible to set the permission for all users or all groups that are present in the acl? Namely, I would like a command that applies permissions uniformly for all members of an entity type, including the owning entities: Ie: setfacl…
MetaChrome
  • 133
  • 10
1
vote
1 answer

ACL multiple default groups?

With Linux ACL, can you have multiple groups with default access to a folder? I want this for sharing code repositories between different coding groups + several processes. My thinking is, if a user from one group creates contents inside the…
Budric
  • 213
  • 1
  • 3
  • 6
1
vote
0 answers

Given the permission to the directory via "setfacl", yet nginx will get "permission denied". Why?

(1) nginx is run as "http": $ sudo ps aux| grep nginx root 10932 0.0 0.1 22264 1340 ? Ss 18:27 0:00 nginx: master process /usr/bin/nginx -g pid /run/nginx.pid; error_log stderr; http 10933 0.0 0.6 22796 6108 ? S…
Rurik
  • 11
  • 1
1
vote
1 answer

linux getfacl shows the correct permissions but user cannot rm a file from command line. "Permission denied"

This scratch file was created by apache -rw-rw-r--+ 1 apache apache 1960 Nov 16 2019 zlz7v5y9.php When executing the following: -bash-4.2$ rm zlz7v5y9.php I get: rm: cannot remove ‘zlz7v5y9.php’: Permission denied Here are the…
Tim Duncklee
  • 194
  • 2
  • 12
0
votes
1 answer

Overwrite directory creation mode using linux acl

I try to give specific user(for example "test") right to read any new created directory. I do that using: undefine@undefine-ThinkPad-T430s:~/test$ getfacl . # file: . # owner: undefine # group:…
undefine
  • 1,046
  • 9
  • 21
0
votes
1 answer

Samba4: ACLs inheritance: owner group will be changed to "domain users" in new created files/dirs

Samba Version 4.3.11 on Ubuntu Xenial server (16.04) In smb.conf I have: Server role: ROLE_DOMAIN_MEMBER [global] ... inherit permissions = Yes inherit acls = Yes # I needed this due to another issue server max protocol = NT1 max…
rawi
  • 97
  • 1
  • 4
0
votes
1 answer

setfacl issue on subdirs created by server

I'm facing issues on inheriting the parent permissions for the folders created by PHP script which is executed by the server. I've created the deployer user, added to www-data group and set the initial folder and file config like below. usermod -a…
Burak
  • 51
  • 3
0
votes
3 answers

Convenient WordPress Web Directory Permissions?

I'm setting up a webserver for WordPress. WordPress requires it's stuff to be owned by www user or it has problems installing plugins and themes (asks for server FTP credentials, it's stupid, I know). This wouldn't be a problem, but I want to…
dzhi
  • 800
  • 3
  • 10
  • 26
0
votes
1 answer

Local "incoming" dir

I need to create a directory on a Linux server where users can "submit" files, similar to the incoming directory on an ftp server. (Where they would not be viewable after submission.) Specifically, this is Fedora 20, though I'm hoping for a solution…
Joe Fruchey
  • 101
  • 1
0
votes
1 answer

which is better, setfacl or chmod +a?

I have been working with Ubuntu for a year or so. Just the other week I have started to learn the Symfony framework which works faster with the ACL. In the installation and configuration of Symfony (…
John
  • 887
  • 4
  • 15
  • 25
0
votes
1 answer

Give read/write permission of group files to a user

How can I use setfacl to allow a user to have read/write permission on the home directory of any user that belongs to a certain group?
madprops
  • 103
  • 3
1
2
3