The ACL is a security and access component of Operating Systems. It contains a set of entries that determine who and what has access to a specified physical or logical system object.

learn more… | top users | synonyms

3
votes
1answer
1k views

Mac OS X ACL and file permissions

I'm trying to share a directory between 2 users, so that both have full access to it and to any files, and directories created within. Here are the things I've done so far: Create a group for the 2 ...
0
votes
1answer
391 views

Why aren't these ACLs working?

I'm trying to set ACLs so that the user and group of new files and directories created in the web server directory are owned by the www-data user. I have the exact same ACL on another server and they ...
1
vote
1answer
97 views

Let a user to run a command as a member of a group he does not belong to, using `sudoers`

How can I let a user U to run a command /usr/bin/C as a member of a group G (while he does not belong to the group G), using sudoers on Debian Wheezy?
0
votes
2answers
192 views

How to make Apache obey to default ACL on Fedora 19?

I have set default ACL to allow me doing anything on newly written files. But Apache seems to ignore that, and I don't have access to newly created files. How to fix that?
1
vote
1answer
143 views

Wake-On-LAN and Access Control List with Mac over Internet

I am researching the best way to wake my computer through a firewall over the internet remotely (the computer to be woken is a Mac). Through external research, I have seen that I should be able to ...
1
vote
1answer
146 views

What is the difference between the read-only attribute and the access control list read-only flag on Windows?

I'm looking for a technical answer, not a general answer, pertaining to how Windows actually handles these properties. For example, there are some programs that recognize the read-only attribute and ...
4
votes
2answers
449 views

Restrict access to a folder by EXE

Is it possible in Windows 7 to restrict which EXEs can access a certain folder? Let's imagine I have a folder (c:\myfolder) with some data files that can only be opened by a certain EXE. For ...
0
votes
0answers
278 views

Prevent copying from specific network locations [duplicate]

A tad unusual question! I need to prevent users from copying (via Ctrl+C / Ctrl+V, Drag+Drop, Edit>Copy / Edit>Paste) from a folder on the local machine. I won't go into details of why, as it's ...
0
votes
1answer
251 views

rsync bullies destination ACLs for fun

I have the following ACLs configured on a directory (.ssh) at the destination of my rsync: # file: .ssh # owner: jsmith # group: jsmith user::rwx user:backup:r-x group::--- group:backup:r-x mask::r-x ...
0
votes
1answer
1k views

users not found in /etc/passwd

I login to a linux box with username user1 and my home folder is in /home. There is another user named user2 that has its home directory in /opt/data/folder. If I want to check the list of users I ...
1
vote
1answer
579 views

FTP, CentOS and SELinux Permissions

I am trying to use vsftpd to allow a user to ftp in and edit files in /var/www/html where most files are owned by apache. So far I have used setsebool to enable system wide ftp, and I've also used ...
-1
votes
2answers
212 views

What's the “all other users” for folder security?

How do I add all other users to this: In the "Enter the object names to select (examples)" field.
2
votes
1answer
136 views

access control list share file but not directory RHEL6

I have a file that I want to be accessible by a single user, but I don't want the user to have access to the folder it resides in. My understanding is that the following steps should work, but they ...
0
votes
1answer
507 views

Permissions Error Time Capsule (can't rsync owned by root:wheel group)

So, I had just flat out erased my Time Capsules 2TB drive and began running a sync script I wrote alongside a Time Machine Backup. They both have been running for over a day without a hitch, but out ...
3
votes
0answers
571 views

How do I restore Windows ACL to default?

A few months ago I got my computer, and instead of sticking with the preinstalled Windows 7 Home Premium and OEM stuff I decided I want a clean install from a DreamSpark disc. At the time I also ...
9
votes
2answers
2k views

How to copy Time Machine volume to another disk using rsync while preserving ACLs?

Recently I had to change my Mac's filesystem from case-preserving to being fully case-sensitive. I did that by using CCC and copying data to another disk, then returning back to newly formatted main ...
1
vote
1answer
264 views

changing ntfs permissions for Windows internal usage, from linux

Troubleshooting an Windows 7 installation. One tactic is to increase permissions on files/directories ACL's (access control lists) for windows, from within windows, so all system data and drivers etc ...
0
votes
1answer
1k views

Understanding chmod and setfacl

I have a file that I think I should be able to execute. It shows these permissions with ls -lah: -rw-rwxr--+ foo foo-group And these with getfacl myfile: # file: app/console # owner: foo # group: ...
0
votes
1answer
220 views

ACLs vs group permissions in linux

I would like to allow a set of students to access a shared web-server. Students work in groups, and each group's home directory contains a www folder that should be accessible to the shared instance ...
0
votes
2answers
6k views

Windows 8 permissions

I am having this really weird problem with Windows 8 where it won't let me edit or save to my program files folder in my C: drive. It keeps telling me access is denied, even when I have taken ...
1
vote
1answer
3k views

Is there a way to allow users to install a specific program without opening full admin rights?

We have an automated builder that creates a "setup.exe" installer file which can then be downloaded by users in our organisation for QA testing. They download the file via a browser from a ...
0
votes
1answer
3k views

Use icacls to make a directory read-only on Windows 7

I'm attempting to test some filesystem exceptions in a Java based application. I need to find a way to create a directory that is located under %TMP% that is set to read-only. Essentially on ...
1
vote
1answer
1k views

How to add full username to a list returned by get-acl?

I want to prepare a list of persons having access to a given folder. The list should also contain the level of access granted. I figured out the following powershell command: Get-Acl ...
0
votes
1answer
458 views

How can I set the default permissions for new files in a directory?

I have a local directory /var/foo I'd like it so that any file created in here can be read and written by any user (and any directory can be rwx). I've tried chacl -b u::rwx,g::rwx,o::rw- ...
0
votes
1answer
1k views

How to let directories inherit the sticky bit and set different default ACLs for directories and files?

First problem: Is it possible to have the sticky bit on directories being inherited for newly created subdirectories? Second problem: How can I set different default ACLs for directories and files, ...
2
votes
0answers
60 views

Mercurial ACL Groups causing 502 error

am setting up my mercurial repo using the ACL extension. When I configure the ACL.deny section I am trying to deny a specific group of users. When blocking them individually ACL works as intended and ...
0
votes
1answer
2k views

Access Control List ACL to Limit an Account

How do I create an ACL in Windows 7 that prevents a public account (called Users) on our Media PC from being able to Read/Write to a particular folder while still allowing me to connect to it over our ...
5
votes
2answers
4k views

Why do you need execute permission on the parent directory to rename a file

On Linux/Unix file-systems, I understand the reason why you need the execute permission on the parent folder to read or write a file: the execute permission gives you access to the inode on the file, ...
5
votes
3answers
664 views

How can I add a user from Windows 8 to an ACL on Windows 7?

The title pretty much says what I want to do. I have a dual-boot setup with Windows 7 and Windows 8. Is there an easier way of doing this? I do not want to takeown the files, just add a user (or two) ...
6
votes
2answers
995 views

Windows with Full Control to Everyone for Everything

Similar to sudo chmod -R 777 /, but for Windows 7. A customer decided he hated the prompts for administrators to continue, so he gave himself Full Control for the Everyone group on Windows 7. Now, ...
0
votes
3answers
3k views

run 'net user' command as administrator

I was writing a simple batch file with the following command net user Abhi * where Abhi is my username and I am the administrator of my computer. On execution, it prompts for a password and then ...
0
votes
1answer
84 views

Delete facl for unnamed user

I accidentally setfacl's for an empty user so that all of my facl's have an unnamed user at the top: # file: test.txt # owner: friend # group: kevinburke user::rw- user:friend:rwx user:kevinburke:rwx ...
0
votes
1answer
527 views

How to create an ACL list on Ubuntu

We are a few people working in an office on a server via SFTP. We all work on the same files so it would be great if we had, by default, read/write access by default on some folders. For example, ...
2
votes
0answers
438 views

File permissions issue with an NFSv4 share, uploaded from a Mac Lion

I have an NFSv4 share that was working fine, with Macs using Snow Leopard, to share files across the network. The NFS share has one cloned user/group that all clients autoconnect as. All files ...
6
votes
2answers
3k views

find files with ACLs set

How can I find all files with some extended ACLs set, i.e. those with a little + at the end of the permission flags shown by ls -l. I could not find a corresponding flag for find. My naive approach ...
4
votes
5answers
704 views

Deny access to Network Adapter in Windows

I have set up a maintenance Network via OpenVPN. However, when I log into a computer (e.g. via remote desktop) and someone else is using it at the same time I have either to accept that she is able to ...
1
vote
2answers
471 views

cygwin can bypass windows xp acls?

How is cygwin able to bypass Windows XP ACLS? In the following example, cmd.exe cannot create a file in a directory but bash can. What gives? C:\WINDOWS\Temp>mkdir noaccess ...
0
votes
1answer
566 views

using setfacl to give access to another user without giving access to a group

I have a user that I use for backup, and I use setfacl to give that user access to files. However, setfacl changes the base ACL entry for group and some applications require that the base ACL entry ...
9
votes
3answers
661 views

Where does the file owner on Windows matter, seeing that there are ACLs?

Coming from a Linux background, I'm used to a file having an owner, and a owning group. Access permissions can be set separately for owner, group, and others, and that's it. Now on (NT-based) ...
0
votes
5answers
4k views

Cannot remove files on Windows

I've got some files that I wish to delete. They are on a local hard drive. This hard drive has never been near any other operating system. I am the administrator, and the only administrator, for this ...
0
votes
1answer
663 views

windows 7 restrict file access

If I want to restrict the access of a folder to myself only, and considering I am the owner, can I leave the Users and Everyone groups in the ACL or do I have to remove them ? If I remove these ...
0
votes
2answers
2k views

Make file undeleteable but accessable

Iam having a problem with denying current user from deleting file on desktop. I tried to use icacls with: icacls file /grant:r %username%:(X,AD,WD,RD) from site but it didnt help I tried to deny ...
1
vote
1answer
1k views

How do you set the default user in Linux for file creation?

I want to create a directory, for example: /public/all But I want it so that if you create a file in all, the owner is root, but anyone with access to the /public/all folder can delete/edit/etc the ...
8
votes
2answers
3k views

NTFS Permissions - SYSTEM

Are there any possible side effects to removing permissions for SYSTEM on an NTFS directory? It is a non-system (user documents) folder. I know the obvious (i.e., that SYSTEM will no longer to be able ...
4
votes
3answers
4k views

NTFS Permissions - Folders and subfolders

Quick scenario on a local Windows system. Drive E: is formatted with NTFS has the following layout and permissions: E:\ (JohnDoe) E:\folder (Administrator) ...
2
votes
1answer
519 views

Using the command “id” in Linux?

I have some doubts with the use of the command id in Linux... I have added one user(andre) to the group "github-total", do if I do id andre I got: $ id andre uid=500(andre) gid=500(andre) ...
0
votes
2answers
681 views

Linux - How to get Filesystem ACL to allow group to have permission to folder

I'm a little confused on how to get this working. I have ACL working and I need to create two goups: github-total: group that the users in that group have permissions to the folder "/var/git" to ...
1
vote
1answer
1k views

How to get ACL to allow group to have permission to folder

I'm a little confused on how to get this working. I have ACL working and I need to create two goups: github-total: group that the users in that group have permissions to the folder "/var/git" to ...
1
vote
1answer
519 views

Setting ACL for a temporarily mounted directory

I wanted to set ACL for a directory. For that it is important that the device should be mounted as acl on that directory. But I do not want to add the acl mount in /etc/fstab. So I am tempoararily ...
0
votes
2answers
2k views

List ACL with ACE in the proof in POWERSHELL?

I can list acl from an OU with Get-ACl cmdlet but I need to see the permission entries like we can see in : OU properties -> Security Tab -> Advanced -> View with Active Directory Users and Computers ...