The ACL is a security and access component of Operating Systems. It contains a set of entries that determine who and what has access to a specified physical or logical system object.

learn more… | top users | synonyms

0
votes
0answers
23 views

Inheriting file permissions

I currently have an AirPlay audio streaming service (Shairport) running on Raspbian on my Raspberry Pi. I have it configured to save the metadata for the songs that are played. For every song, it ...
0
votes
0answers
24 views

How to deny access on Avira file ipmgui.exe?

i can't modify anything of the ACL of the ipmgui.exe file (or any file of Avira in the same dir). It's not working at all with any cacls line tried, even under a system prompt ! I'm not sure at all ...
0
votes
1answer
16 views

Remove inherited permissions with SetACL

I'm using SetACL as an alternative to icacls to process objects' DACL SACL and ownership. After reading the documentation, I see that the clear parameter clears the ACL of any non-inherited ACEs, ...
0
votes
1answer
52 views

Autoit fails to create registry key where regedit does

I wrote a AutoIt program that use RegWrite to add several registry value. I tested it as 'Domain Admins' and it fail to write, I runned it as local 'Administrator' and the values where changed. I ...
0
votes
0answers
49 views

Samba Guest User ACL Permissions issue

I am trying to set up a share where the underlying files are owned by a particular user but the samba guest user (nobody) has permissions to read/execute. I have spent ages trying different things and ...
0
votes
0answers
12 views

Allow user via setfacl to chown files

I am using ACL to set specific permissions in a folder: setfacl -R -m u:wordpress:wrx /var/www/html/wp As that user, I am able to create a folder touch test but if i want to change the ownership ...
3
votes
1answer
111 views

Use /sys/class/gpio/ in Python without root permissions

I want to interact with the GPIO pins using the Python module Ablib. And I want to do this without root permissions. How can I achieve this? When I create an ablib.Pin instance the module opens ...
1
vote
0answers
16 views

Is there a way to use ACL to deny access to folders by user, preferrably by making them invisible?

Is there a way to use Linux's Access Control Lists feature to deny access to folders by user, preferrably by making them invisible? This is needed for a chroot SFTP environment where we want to block ...
0
votes
1answer
23 views

Is it possible to hide directories on share using Apple ACL?

I'm just setting an office server running Maverick Server. I can setup control to directories and block some users or group from accessing certain things. However, I can't seem to find any way to ...
0
votes
0answers
10 views

Windows 8 Admin Users Not Appearing on Refresh or Other Repair Options

Something a little odd has happened where I am working on a system that's been stuck in an infinite repair loop on Windows 8. Further, when you go into the repair -> refresh option, it unfortunately ...
2
votes
1answer
96 views

How do NTFS Permissions Work with Deletion?

I have a folderA. I'd like a user (let's call him darth) to be able to do anything (create,read,write,delete) folders/files inside folderA , BUT darth should NOT be able to delete folderA itself. To ...
0
votes
0answers
9 views

facl doesn't set files executable by default

I ran these commands on a directory: setfacl -d -m g::rwx dir setfacl -d -m u::rwx dir setfacl -d -m o::--- dir getfacl dir returns # file: dir # owner: someuser # group: somegroup # flags: -s- ...
1
vote
0answers
43 views

Is there anyway you can restrict users from executing a command with another name?

I'm not asking an obvious question here. I would like to elucidate with an example. A user 'bob' is always executing 'chmod 777 /home/bob/impfiles' so that user 'alice' could make changes to the ...
0
votes
1answer
33 views

Preserve ability to set FACL

Using setfacl on linux, seems like only owner (and root) can modify the ACL via setfacl, is that right? If there is a directory owned by joe and joe grants rwx to marry, she can read any file, ...
1
vote
2answers
50 views

Windows VM is resetting file permissions on CentOS host

I have a CentOS host machine with a Windows 7 virtual machine in VMware. There is a shared drive on the host machine (NFS share with other machines on the network) which has been configured with ACLs ...
0
votes
1answer
28 views

Why do Protocol Service Multiplexers can take only ODD numbered values between 1 and 32,767?

I am following a book called Bluetooth Essentials for Programmers and I am not much experienced, in the book it doesn't explain the reason of the odd-numbered values and I couldn't find information ...
1
vote
0answers
67 views

New File via Dropbox Does Not Inherit Windows Directory Permissions

Environment: Windows Server 2012 Mac OS 10.6.8 Dropbox The purpose of the Dropbox share is to allow the user on the Mac to move files into a directory that is served by IIS on the Windows Server ...
0
votes
1answer
536 views

How can I make Windows modify CIFS/ZFS ACLs 'correctly'

I have a FreeNAS (FreeBSD) system with a CIFS share (called "library") backed by a ZFS file system. The share is set up as per the FreeNAS GUI to use "Windows / Mac" ACLs which I'm led to believe ...
1
vote
0answers
9 views

How to stop existing user appearing in lastlog?

-l, --no-log-init is available in useradd, but not in usermod. How can I modify a user in this manner? And how does it work anyway?
1
vote
0answers
11 views

set ACL for BackupUser

I want to backup a whole bunch of folders from different users remotely. Therefore I created a special user that is able to log into the machine and (should) have the right to read all the files via a ...
0
votes
1answer
80 views

Standard user cannot access directory with ownership and mod 777, but root can

I have the weird issue of a directory being visible and viewable by root, but not by average users (even a sudoer). I run the command ls -alF at the directory containing the folder in question, and I ...
0
votes
0answers
87 views

ACL inheritance Hide files, show folders (Windows XP/…/7)

I'm currently trying to set ACLs in way that every people from a folder can access every sub-folder in it but cannot see the files. Is it possible to do this ? Possibly with an inheritance system ? ...
-2
votes
1answer
476 views

Why did Windows 8.1 damage the security permissions on a drive from another Windows installation

I have a problem with Windows 8.1 and doing a "quick" backup of the files and folders on another installations HDD Scenario: Computer A: My computer = Windows 8.1 fully patched Computer B: ...
0
votes
1answer
283 views

Can't delete folder as admin, asks for Admin User that doesn't exist - “You'll need to provide administrator permission to delete this folder”

I am having a similar issue to the user who posted here. Basically, a folder in my Downloads (which shouldn't have any special permissions) won't allow me to delete it. When I try, I get a message ...
1
vote
1answer
165 views

ACL On Linux like Windows Permissions

Is there something for Linux where you have more advanced controls for linux permissions on users and groups like Windows. Is that what SeLinux is about?
0
votes
0answers
63 views

Exim is ignoring my ACL definitions for blacklists

As I am running several free sites which are CMS - based spammers are massivly attacking me. So I decided to set up my exim4 - installation for blacklisting domains. Exim seems not to care about any ...
1
vote
1answer
2k views

How to setup nfs share for users with write permissions

We used ubuntu linux on desktops with ldap authentication. Both on server and clients we have identical users and groups. I've setup nfs server with public share, which should be available for all ...
0
votes
1answer
297 views

Is it possible to set ACLs on a sysfs mount point?

I'd like to add the write access on /sys/power/state to my UID via ACLs, this way I'd don't need to use sudo or any setuid program to make my workstation go on sleepmode, is that possible ? I tried, ...
2
votes
1answer
90 views

ACL vs standard file permissions - which are used when accessing file?

ACLs and standard file permissions seem to be synchronized: $ getfacl test.cpp # file: test.cpp # owner: scdmb # group: scdmb user::rw- group::rw- other::r-- $ ls -l test.cpp -rw-rw-r-- 2 scdmb ...
0
votes
2answers
114 views

How can I set default permission with ACL in linux?

I have two groups group1 and group2. I need group1 users to be able to read-write (rwx) files owned by users in group2, but users in group2 cannot write to (r-x) files from group1. All users in a ...
0
votes
1answer
144 views

Explorer.exe COMRuntime error: unexisting user can't get access permissions to COM server

since explorer has no appid, it's not possible to find relevant DCOM component in Component Services. I tried editing access rights in Elevated-Unelevated Explorer Factory component and editing ...
2
votes
1answer
152 views

Effective group permission of a directory - setgid ineffective

I have this /srv directory that, for convenience, I would like members of the wheel group to have write access to, and for any files and directories created to transitively inherit the permissions. ...
2
votes
2answers
6k views

Change registry permissions via command line (batch file)

I found an awesome Reg Hack for Windows 7, that renames the 'Computer' icon to something like %username% on %computername%. Unfortunately, in the tutorial, it says to change permissions of the ...
-5
votes
1answer
98 views

What does it mean to tor your ACL? [closed]

I've heard many people say that they tor their ACL. What does it mean? like they anonymously route their user permissions?
0
votes
1answer
31 views

Single permission OS X ACL entries

I'm just trying to understand what happens when you apply a new ACL entry (specifying only a single permission) to a directory or file through the terminal. For example if I were to run this to allow ...
0
votes
2answers
739 views

Files copied to shared folder do not inherit permissions

I have a shared directory with the Guest account having Read & execute, Read, List contents permissions. I can access files over the network (e.g. on my tablet or laptop) without issue. However, ...
1
vote
1answer
246 views

How do I find all files that do NOT have SYSTEM permission?

I saw that I can use icacls to find all files matching a SID, but how do I find all files that DO NOT have access for SYSTEM user? ICACLS name /findsid Sid [/T] [/C] [/L] [/Q] finds all matching ...
3
votes
2answers
250 views

How can I prevent access to my home directory from another root user?

This question was asked during an interview with Google and I can't find any answer. I'm thinking of encrypting your home directory, but if anyone has done it before, i'd appreciate if you can share ...
0
votes
0answers
47 views

OpenLDAP - Hide Group / Hide Group Members

I have an OpenLDAP server setup and it is working correctly. My question is this: is there some sort of ACL I can apply that will hide a group or members of a group from another group? In other ...
2
votes
2answers
391 views

Disable UAC/SID/ACL on windows 2008 R2

When i am logged in as an administrator on windows 2008R2 I NEVER EVER WANT permissions to be denied for any access modifications configurations or changes I make EVER. If I delete a printer I want it ...
1
vote
2answers
93 views

How can I list permissions of every component in a file path?

Sometimes it is necessary to determine on which directory in a path access rights are limited. Here is an example: $ ls /sys/kernel/debug/usb/devices ls: cannot access /sys/kernel/debug/usb/devices: ...
0
votes
0answers
26 views

Like a root but not quite the same

Is it possible to create a linux user group that has all other rights just like the root user, with the exception that it can only read files in /var/log folder, but can not change or delete them? Of ...
0
votes
0answers
34 views

No-execute access for file when on server but yes when on desktop

I am trying to set file permissions for an iMovie HD project file to be limited when it's on a server but have full access when it's on the user's desktop. I need to have users be able to copy a file ...
1
vote
1answer
111 views

How to chmod file I have access to, but I'm not the owner of?

First, why can't I do this? % id -un me % ls -l -rw-rw-r--+ bob bob 100 today foo % chmod +x foo chmod: changing permissions of `foo': Operation not permitted % getfacl foo # file: foo # owner: bob # ...
0
votes
2answers
723 views

Windows 8 Command Line Runas sending a password with a bat file

I want to use a .bat file to run a program at the windows 8 command line as 'aaron-desk/administrator'. This account has no password. I've tried the runas command, but this give me an error message ...
2
votes
0answers
690 views

Clean OSX (Mavericks) install: User folder / ACLs / .DocumentRevisions-V100/

I want to do a clean install of OSX Mavericks and manually transfer user-files. Reasons: I have migrated my User-Account over 3 or 4 releases and I want to make sure i don't carry old data or ...
16
votes
2answers
17k views

How to remove read-only attribute recursively on Windows 7

I need to remove read-only attributes of all files under a directory recursively on Windows 7 using command line. I think one can do this using icacls but I couldn't figure exactly how to do it. ...
2
votes
2answers
5k views

Copy security permissions of one file to another

I would like to replicate the permissions of a file to another. I do not want to copy the data, only the permissions. For example, I created a new file and want it to have the same permissions as ...
1
vote
1answer
247 views

Changing access rights of the specific folder for specifeid user

what is the exact analog of the following two commands in linux # chmod -R +a "www-data allow read,delete,write,append,file_inherit,directory_inherit" /path/to/moodledata $ sudo chmod -R ...
3
votes
1answer
175 views

why setting acl for a user changes group perms in ls output?

I'm trying to figure out why the output of ls command has changed. I mean group permissions for a file. I've created a file named "file" and changed its owner&group: [root@training group3]# ...