The ACL is a security and access component of Operating Systems. It contains a set of entries that determine who and what has access to a specified physical or logical system object.

learn more… | top users | synonyms

2
votes
1answer
231 views

Effective group permission of a directory - setgid ineffective

I have this /srv directory that, for convenience, I would like members of the wheel group to have write access to, and for any files and directories created to transitively inherit the permissions. ...
2
votes
2answers
10k views

Change registry permissions via command line (batch file)

I found an awesome Reg Hack for Windows 7, that renames the 'Computer' icon to something like %username% on %computername%. Unfortunately, in the tutorial, it says to change permissions of the ...
-5
votes
1answer
114 views

What does it mean to tor your ACL? [closed]

I've heard many people say that they tor their ACL. What does it mean? like they anonymously route their user permissions?
0
votes
1answer
35 views

Single permission OS X ACL entries

I'm just trying to understand what happens when you apply a new ACL entry (specifying only a single permission) to a directory or file through the terminal. For example if I were to run this to allow ...
0
votes
2answers
888 views

Files copied to shared folder do not inherit permissions

I have a shared directory with the Guest account having Read & execute, Read, List contents permissions. I can access files over the network (e.g. on my tablet or laptop) without issue. However, ...
1
vote
1answer
311 views

How do I find all files that do NOT have SYSTEM permission?

I saw that I can use icacls to find all files matching a SID, but how do I find all files that DO NOT have access for SYSTEM user? ICACLS name /findsid Sid [/T] [/C] [/L] [/Q] finds all matching ...
3
votes
2answers
336 views

How can I prevent access to my home directory from another root user?

This question was asked during an interview with Google and I can't find any answer. I'm thinking of encrypting your home directory, but if anyone has done it before, i'd appreciate if you can share ...
2
votes
2answers
516 views

Disable UAC/SID/ACL on windows 2008 R2

When i am logged in as an administrator on windows 2008R2 I NEVER EVER WANT permissions to be denied for any access modifications configurations or changes I make EVER. If I delete a printer I want it ...
1
vote
2answers
138 views

How can I list permissions of every component in a file path?

Sometimes it is necessary to determine on which directory in a path access rights are limited. Here is an example: $ ls /sys/kernel/debug/usb/devices ls: cannot access /sys/kernel/debug/usb/devices: ...
0
votes
0answers
26 views

Like a root but not quite the same

Is it possible to create a linux user group that has all other rights just like the root user, with the exception that it can only read files in /var/log folder, but can not change or delete them? Of ...
0
votes
0answers
39 views

No-execute access for file when on server but yes when on desktop

I am trying to set file permissions for an iMovie HD project file to be limited when it's on a server but have full access when it's on the user's desktop. I need to have users be able to copy a file ...
1
vote
1answer
140 views

How to chmod file I have access to, but I'm not the owner of?

First, why can't I do this? % id -un me % ls -l -rw-rw-r--+ bob bob 100 today foo % chmod +x foo chmod: changing permissions of `foo': Operation not permitted % getfacl foo # file: foo # owner: bob # ...
0
votes
2answers
857 views

Windows 8 Command Line Runas sending a password with a bat file

I want to use a .bat file to run a program at the windows 8 command line as 'aaron-desk/administrator'. This account has no password. I've tried the runas command, but this give me an error message ...
2
votes
0answers
731 views

Clean OSX (Mavericks) install: User folder / ACLs / .DocumentRevisions-V100/

I want to do a clean install of OSX Mavericks and manually transfer user-files. Reasons: I have migrated my User-Account over 3 or 4 releases and I want to make sure i don't carry old data or ...
21
votes
2answers
33k views

How to remove read-only attribute recursively on Windows 7

I need to remove read-only attributes of all files under a directory recursively on Windows 7 using command line. I think one can do this using icacls but I couldn't figure exactly how to do it. ...
2
votes
2answers
7k views

Copy security permissions of one file to another

I would like to replicate the permissions of a file to another. I do not want to copy the data, only the permissions. For example, I created a new file and want it to have the same permissions as ...
1
vote
1answer
362 views

Changing access rights of the specific folder for specifeid user

what is the exact analog of the following two commands in linux # chmod -R +a "www-data allow read,delete,write,append,file_inherit,directory_inherit" /path/to/moodledata $ sudo chmod -R ...
3
votes
1answer
203 views

why setting acl for a user changes group perms in ls output?

I'm trying to figure out why the output of ls command has changed. I mean group permissions for a file. I've created a file named "file" and changed its owner&group: [root@training group3]# ...
3
votes
1answer
2k views

Mac OS X ACL and file permissions

I'm trying to share a directory between 2 users, so that both have full access to it and to any files, and directories created within. Here are the things I've done so far: Create a group for the 2 ...
0
votes
1answer
468 views

Why aren't these ACLs working?

I'm trying to set ACLs so that the user and group of new files and directories created in the web server directory are owned by the www-data user. I have the exact same ACL on another server and they ...
1
vote
1answer
106 views

Let a user to run a command as a member of a group he does not belong to, using `sudoers`

How can I let a user U to run a command /usr/bin/C as a member of a group G (while he does not belong to the group G), using sudoers on Debian Wheezy?
0
votes
2answers
223 views

How to make Apache obey to default ACL on Fedora 19?

I have set default ACL to allow me doing anything on newly written files. But Apache seems to ignore that, and I don't have access to newly created files. How to fix that?
1
vote
1answer
164 views

Wake-On-LAN and Access Control List with Mac over Internet

I am researching the best way to wake my computer through a firewall over the internet remotely (the computer to be woken is a Mac). Through external research, I have seen that I should be able to ...
1
vote
1answer
202 views

What is the difference between the read-only attribute and the access control list read-only flag on Windows?

I'm looking for a technical answer, not a general answer, pertaining to how Windows actually handles these properties. For example, there are some programs that recognize the read-only attribute and ...
6
votes
2answers
574 views

Restrict access to a folder by EXE

Is it possible in Windows 7 to restrict which EXEs can access a certain folder? Let's imagine I have a folder (c:\myfolder) with some data files that can only be opened by a certain EXE. For ...
0
votes
0answers
278 views

Prevent copying from specific network locations [duplicate]

A tad unusual question! I need to prevent users from copying (via Ctrl+C / Ctrl+V, Drag+Drop, Edit>Copy / Edit>Paste) from a folder on the local machine. I won't go into details of why, as it's ...
0
votes
1answer
325 views

rsync bullies destination ACLs for fun

I have the following ACLs configured on a directory (.ssh) at the destination of my rsync: # file: .ssh # owner: jsmith # group: jsmith user::rwx user:backup:r-x group::--- group:backup:r-x mask::r-x ...
1
vote
1answer
2k views

users not found in /etc/passwd

I login to a linux box with username user1 and my home folder is in /home. There is another user named user2 that has its home directory in /opt/data/folder. If I want to check the list of users I ...
1
vote
1answer
675 views

FTP, CentOS and SELinux Permissions

I am trying to use vsftpd to allow a user to ftp in and edit files in /var/www/html where most files are owned by apache. So far I have used setsebool to enable system wide ftp, and I've also used ...
-1
votes
2answers
258 views

What's the “all other users” for folder security?

How do I add all other users to this: In the "Enter the object names to select (examples)" field.
2
votes
1answer
147 views

access control list share file but not directory RHEL6

I have a file that I want to be accessible by a single user, but I don't want the user to have access to the folder it resides in. My understanding is that the following steps should work, but they ...
0
votes
1answer
590 views

Permissions Error Time Capsule (can't rsync owned by root:wheel group)

So, I had just flat out erased my Time Capsules 2TB drive and began running a sync script I wrote alongside a Time Machine Backup. They both have been running for over a day without a hitch, but out ...
3
votes
1answer
701 views

How do I restore Windows ACL to default?

A few months ago I got my computer, and instead of sticking with the preinstalled Windows 7 Home Premium and OEM stuff I decided I want a clean install from a DreamSpark disc. At the time I also ...
9
votes
3answers
2k views

How to copy Time Machine volume to another disk using rsync while preserving ACLs?

Recently I had to change my Mac's filesystem from case-preserving to being fully case-sensitive. I did that by using CCC and copying data to another disk, then returning back to newly formatted main ...
1
vote
1answer
324 views

changing ntfs permissions for Windows internal usage, from linux

Troubleshooting an Windows 7 installation. One tactic is to increase permissions on files/directories ACL's (access control lists) for windows, from within windows, so all system data and drivers etc ...
0
votes
1answer
2k views

Understanding chmod and setfacl

I have a file that I think I should be able to execute. It shows these permissions with ls -lah: -rw-rwxr--+ foo foo-group And these with getfacl myfile: # file: app/console # owner: foo # group: ...
0
votes
1answer
243 views

ACLs vs group permissions in linux

I would like to allow a set of students to access a shared web-server. Students work in groups, and each group's home directory contains a www folder that should be accessible to the shared instance ...
0
votes
2answers
6k views

Windows 8 permissions

I am having this really weird problem with Windows 8 where it won't let me edit or save to my program files folder in my C: drive. It keeps telling me access is denied, even when I have taken ...
1
vote
1answer
4k views

Is there a way to allow users to install a specific program without opening full admin rights?

We have an automated builder that creates a "setup.exe" installer file which can then be downloaded by users in our organisation for QA testing. They download the file via a browser from a ...
0
votes
1answer
3k views

Use icacls to make a directory read-only on Windows 7

I'm attempting to test some filesystem exceptions in a Java based application. I need to find a way to create a directory that is located under %TMP% that is set to read-only. Essentially on ...
1
vote
1answer
2k views

How to add full username to a list returned by get-acl?

I want to prepare a list of persons having access to a given folder. The list should also contain the level of access granted. I figured out the following powershell command: Get-Acl ...
0
votes
1answer
633 views

How can I set the default permissions for new files in a directory?

I have a local directory /var/foo I'd like it so that any file created in here can be read and written by any user (and any directory can be rwx). I've tried chacl -b u::rwx,g::rwx,o::rw- ...
0
votes
1answer
1k views

How to let directories inherit the sticky bit and set different default ACLs for directories and files?

First problem: Is it possible to have the sticky bit on directories being inherited for newly created subdirectories? Second problem: How can I set different default ACLs for directories and files, ...
2
votes
0answers
64 views

Mercurial ACL Groups causing 502 error

am setting up my mercurial repo using the ACL extension. When I configure the ACL.deny section I am trying to deny a specific group of users. When blocking them individually ACL works as intended and ...
0
votes
1answer
2k views

Access Control List ACL to Limit an Account

How do I create an ACL in Windows 7 that prevents a public account (called Users) on our Media PC from being able to Read/Write to a particular folder while still allowing me to connect to it over our ...
5
votes
2answers
5k views

Why do you need execute permission on the parent directory to rename a file

On Linux/Unix file-systems, I understand the reason why you need the execute permission on the parent folder to read or write a file: the execute permission gives you access to the inode on the file, ...
5
votes
3answers
687 views

How can I add a user from Windows 8 to an ACL on Windows 7?

The title pretty much says what I want to do. I have a dual-boot setup with Windows 7 and Windows 8. Is there an easier way of doing this? I do not want to takeown the files, just add a user (or two) ...
6
votes
2answers
1k views

Windows with Full Control to Everyone for Everything

Similar to sudo chmod -R 777 /, but for Windows 7. A customer decided he hated the prompts for administrators to continue, so he gave himself Full Control for the Everyone group on Windows 7. Now, ...
0
votes
3answers
4k views

run 'net user' command as administrator

I was writing a simple batch file with the following command net user Abhi * where Abhi is my username and I am the administrator of my computer. On execution, it prompts for a password and then ...
0
votes
1answer
89 views

Delete facl for unnamed user

I accidentally setfacl's for an empty user so that all of my facl's have an unnamed user at the top: # file: test.txt # owner: friend # group: kevinburke user::rw- user:friend:rwx user:kevinburke:rwx ...