The ACL is a security and access component of Operating Systems. It contains a set of entries that determine who and what has access to a specified physical or logical system object.

learn more… | top users | synonyms

0
votes
1answer
19 views

Cannot read directory “(name)”: File exists

I am trying to update a Windows 7 installation to Windows 10, but the procedure is failing repeatedly at step MIGRATE_DATA. Investigating what could prevent the migration, I found two corrupted files ...
1
vote
0answers
13 views

Is there a Linux `setfacl --test` equivalent for BSD?

The Linux version of setfacl, as opposed to the BSD version has that very handy --test option: --test Test mode. Instead of changing the ACLs of any files, the resulting ACLs are ...
0
votes
0answers
24 views

Clean way to preserve permissions in backups from Linux stored on NTFS

With cygwin, rsync and SSH I have set up a backup mechanism that copies all of the vServers (running Debian) contents to my local NTFS hard drive (running Windows 10) and it works. Partially. I use ...
0
votes
0answers
12 views

OpenZFS ACLs on OSX

I mistakenly did a chmod ug+rwX rather than chmod ug=rwX and have now gained a host of ACLs on the folder and I cannot get rid of them. It is really screwing things up with shared use and rsync to NAS ...
2
votes
0answers
22 views

How do I set default (not inherit) acl permissions on file creation?

This is with a freenas box (FreeNAS-9.3-STABLE-201506292130). In debian-based linux generally there is a default permissions of 644/755 for files/directories (now 664/775?). As I understand it, this ...
0
votes
3answers
50 views

how to insert a text file in hosts.allow or hosts.deny?

So I read in man page of hosts.deny that i can input files in /etc/hosts.allow or hosts.deny to input ip addresses which i want to block or deny. So i tried doing this in hosts.allow sshd: ALL ...
1
vote
0answers
20 views

Linux (POSIX) file ACLs: is it possible to set a default ACL for a single user ONLY?

POSIX file ACLs: is it possible to grant default read access for a specific user to new files/directories within a directory, without setting default ACLs for user::/group::/mask::/other::? On a ...
0
votes
0answers
31 views

Setting file permissions doesn't propagate to newly created subdirectories/files

How can I set the ACL permissions for a directory, such that newly created sub-directories and files receive the same read, write, and directory execute permissions as the parent directory? I've ...
0
votes
0answers
20 views

Grant full access to the contents of a directory to a user

I have a directory that has directories created in it, and files created in those directories. There are several layers of directories that are generated. The files and directories are created ...
0
votes
0answers
59 views

windows xp Professional restore Security Descriptors after cacls /t /e /p

Someone changed the permissions on a bunch of machines using cacls which fixed one problem but created a bigger one. I'm looking at ways to revert this but can't seem to get it back to the way it was. ...
1
vote
1answer
32 views

How to set Permissions and Owner/Group to be used for file creation?

Legend: Owner/Group e.g. AccountUser/Nobody On a web server (apache), I have a folder (chmod 775, AccountUser/Nobody) which I move uploaded files into. A web-based script running as Nobody is used ...
0
votes
1answer
50 views

How to change permissions on a folder when the owner doesn't have read access and no one else has change permissions enabled?

So the basic scenario is this. UserA creates a folder with a few subfolders and documents. UserB comes along and changes the permissions on the folder and subfolders so he can list folder contents and ...
0
votes
0answers
45 views

POSIX and ACL permissions Mac Server

I have a mac mini server and have a script run at login for network users that mounts a shared drive on the mac server. When they mount up, I create a folder with their name as the folder name. What ...
0
votes
1answer
90 views

SubInACL using accent in usergroup name returns error 1337

I'm trying to reset my registry permissions to default because something modified it and causing some problems. But when I replace the "Administrators" usergroup name with the translated one which ...
1
vote
1answer
94 views

Trying to inherit parent permissions but setfacl doesn't work as intended

I'm running Ubuntu Server 14.04.2 LTS and I've installed acl using sudo apt-get install acl. I'm trying to create a www folder under /srv that the web server has read/write access to in addition to ...
0
votes
1answer
50 views

Undo setfacl changes

Using Cygwin in a virtual machine, I ran this command setfacl --remove-all /cygdrive/c After that I noticed this message: C:\ is not accessible. Access is denied. I undid this change by ...
0
votes
0answers
50 views

Squid specific configuration for multiple listening ports

On my entirely Linux-based home network I've a running Squid instance. I've setup Squid to listen to multiple ports, and I want to give a few people access to different ports but with a specific set ...
0
votes
0answers
168 views

Exporting raw data of Checkpoint Firewall

I am looking to export a Checkpoint configuration to a Excel document (HTML or XML would also work). However, one requirement is to have the configuration showing the rule base with IPs ONLY (no ...
0
votes
0answers
58 views

ACL inter-vlan routing

I need to configure access control list on layer 3 switches for a some school's: Now the PC's from one classroom can access the PC's from the other classroom. How can I configure that they only can ...
0
votes
1answer
36 views

Removing lines in text document that end the same

We have a script that downloads a list of domains for our squid box to block, but we keep getting warnings like the following: 2015/03/02 17:08:47| WARNING: You should probably remove '.artnau.com' ...
1
vote
0answers
50 views

umask linux incorrect file permissions

id buser - umask 0022 - group - appgrp directory /sample/sftp getfacl sftp # file: sftp # owner: appsdr # group: appgrp user::rwx user:590:rwx user:15003:rwx group::rwx mask::rwx other::r-x now ...
0
votes
0answers
45 views

Invalid hostname in HELO sent by MUA

I have a mail server running exim4 with an ACL that drops the smtp session if the hostname in HELO is an IP address. Exim is configured to do the reverse dns check. The said ACL is the very first one ...
0
votes
0answers
11 views

Is it possible to allow standard user account manipulate in the routing table under windows 8.1?

Is it possible to allow standard user account manipulate in the routing table under windows 8.1? Can I add policy, configure the system etc so that common user could do this? Thanks!
0
votes
1answer
12 views

Setting ACL for group read access

Let me introduce you to margaret and pepijn, my two LDAP users. Pepijn is at the bottom of my non-existent corporation's food chain and is therefore member of only one LDAP-group: pepijn@srv:/$ ...
0
votes
0answers
51 views

Squid - Block FTP Upload

I have a working Squid. Now I'm trying to block FTP Uploads. Downloads from FTP servers should work. Is there a way to set such ACL's? Greetings Florian
1
vote
1answer
269 views

Ntfs permission error

We occasionally observe damaged permissions on folders with the error: No permissions have been assigned for this object The affected systems are mostly Windows 7 but also Terminal Server 2008 and ...
0
votes
3answers
91 views

Inheriting file permissions

I currently have an AirPlay audio streaming service (Shairport) running on Raspbian on my Raspberry Pi. I have it configured to save the metadata for the songs that are played. For every song, it ...
0
votes
1answer
330 views

How is access denied on Avira file ipmgui.exe?

I can't modify anything of the ACL of the ipmgui.exe file (or any file of Avira in the same directory). It's not working at all with any cacls line tried, even under a system prompt!  I'm not sure at ...
0
votes
1answer
153 views

Remove inherited permissions with SetACL

I'm using SetACL as an alternative to icacls to process objects' DACL SACL and ownership. After reading the documentation, I see that the clear parameter clears the ACL of any non-inherited ACEs, ...
0
votes
1answer
291 views

Autoit fails to create registry key where regedit does

I wrote a AutoIt program that use RegWrite to add several registry value. I tested it as 'Domain Admins' and it fail to write, I runned it as local 'Administrator' and the values where changed. I ...
0
votes
0answers
217 views

Samba Guest User ACL Permissions issue

I am trying to set up a share where the underlying files are owned by a particular user but the samba guest user (nobody) has permissions to read/execute. I have spent ages trying different things and ...
0
votes
2answers
82 views

How can I allow my regular user to chown files, via setfacl?

I am using ACL to set specific permissions in a directory: setfacl -R -m u:wordpress:wrx /var/www/html/wp As that user, I am able to create a subdirectory within the directory with mkdir test, but ...
3
votes
1answer
358 views

Use /sys/class/gpio/ in Python without root permissions

I want to interact with the GPIO pins using the Python module Ablib. And I want to do this without root permissions. How can I achieve this? When I create an ablib.Pin instance the module opens ...
1
vote
0answers
20 views

Is there a way to use ACL to deny access to folders by user, preferrably by making them invisible?

Is there a way to use Linux's Access Control Lists feature to deny access to folders by user, preferrably by making them invisible? This is needed for a chroot SFTP environment where we want to block ...
0
votes
1answer
63 views

Is it possible to hide directories on share using Apple ACL?

I'm just setting an office server running Maverick Server. I can setup control to directories and block some users or group from accessing certain things. However, I can't seem to find any way to ...
0
votes
0answers
12 views

Windows 8 Admin Users Not Appearing on Refresh or Other Repair Options

Something a little odd has happened where I am working on a system that's been stuck in an infinite repair loop on Windows 8. Further, when you go into the repair -> refresh option, it unfortunately ...
2
votes
1answer
159 views

How do NTFS Permissions Work with Deletion?

I have a folderA. I'd like a user (let's call him darth) to be able to do anything (create,read,write,delete) folders/files inside folderA , BUT darth should NOT be able to delete folderA itself. To ...
0
votes
0answers
23 views

facl doesn't set files executable by default

I ran these commands on a directory: setfacl -d -m g::rwx dir setfacl -d -m u::rwx dir setfacl -d -m o::--- dir getfacl dir returns # file: dir # owner: someuser # group: somegroup # flags: -s- ...
1
vote
0answers
59 views

Is there anyway you can restrict users from executing a command with another name?

I'm not asking an obvious question here. I would like to elucidate with an example. A user 'bob' is always executing 'chmod 777 /home/bob/impfiles' so that user 'alice' could make changes to the ...
0
votes
1answer
42 views

Preserve ability to set FACL

Using setfacl on linux, seems like only owner (and root) can modify the ACL via setfacl, is that right? If there is a directory owned by joe and joe grants rwx to marry, she can read any file, ...
1
vote
2answers
88 views

Windows VM is resetting file permissions on CentOS host

I have a CentOS host machine with a Windows 7 virtual machine in VMware. There is a shared drive on the host machine (NFS share with other machines on the network) which has been configured with ACLs ...
0
votes
1answer
38 views

Why do Protocol Service Multiplexers can take only ODD numbered values between 1 and 32,767?

I am following a book called Bluetooth Essentials for Programmers and I am not much experienced, in the book it doesn't explain the reason of the odd-numbered values and I couldn't find information ...
1
vote
0answers
104 views

New File via Dropbox Does Not Inherit Windows Directory Permissions

Environment: Windows Server 2012 Mac OS 10.6.8 Dropbox The purpose of the Dropbox share is to allow the user on the Mac to move files into a directory that is served by IIS on the Windows Server ...
0
votes
1answer
2k views

How can I make Windows modify CIFS/ZFS ACLs 'correctly'

I have a FreeNAS (FreeBSD) system with a CIFS share (called "library") backed by a ZFS file system. The share is set up as per the FreeNAS GUI to use "Windows / Mac" ACLs which I'm led to believe ...
1
vote
0answers
17 views

How to stop existing user appearing in lastlog?

-l, --no-log-init is available in useradd, but not in usermod. How can I modify a user in this manner? And how does it work anyway?
1
vote
0answers
18 views

set ACL for BackupUser

I want to backup a whole bunch of folders from different users remotely. Therefore I created a special user that is able to log into the machine and (should) have the right to read all the files via a ...
0
votes
1answer
116 views

Standard user cannot access directory with ownership and mod 777, but root can

I have the weird issue of a directory being visible and viewable by root, but not by average users (even a sudoer). I run the command ls -alF at the directory containing the folder in question, and I ...
0
votes
0answers
154 views

ACL inheritance Hide files, show folders (Windows XP/…/7)

I'm currently trying to set ACLs in way that every people from a folder can access every sub-folder in it but cannot see the files. Is it possible to do this ? Possibly with an inheritance system ? ...
-2
votes
1answer
1k views

Why did Windows 8.1 damage the security permissions on a drive from another Windows installation

I have a problem with Windows 8.1 and doing a "quick" backup of the files and folders on another installations HDD Scenario: Computer A: My computer = Windows 8.1 fully patched Computer B: ...
0
votes
1answer
1k views

Can't delete folder as admin, asks for Admin User that doesn't exist - “You'll need to provide administrator permission to delete this folder”

I am having a similar issue to the user who posted here. Basically, a folder in my Downloads (which shouldn't have any special permissions) won't allow me to delete it. When I try, I get a message ...