The ACL is a security and access component of Operating Systems. It contains a set of entries that determine who and what has access to a specified physical or logical system object.

learn more… | top users | synonyms

2
votes
2answers
465 views

Disable UAC/SID/ACL on windows 2008 R2

When i am logged in as an administrator on windows 2008R2 I NEVER EVER WANT permissions to be denied for any access modifications configurations or changes I make EVER. If I delete a printer I want it ...
1
vote
2answers
116 views

How can I list permissions of every component in a file path?

Sometimes it is necessary to determine on which directory in a path access rights are limited. Here is an example: $ ls /sys/kernel/debug/usb/devices ls: cannot access /sys/kernel/debug/usb/devices: ...
0
votes
0answers
26 views

Like a root but not quite the same

Is it possible to create a linux user group that has all other rights just like the root user, with the exception that it can only read files in /var/log folder, but can not change or delete them? Of ...
0
votes
0answers
36 views

No-execute access for file when on server but yes when on desktop

I am trying to set file permissions for an iMovie HD project file to be limited when it's on a server but have full access when it's on the user's desktop. I need to have users be able to copy a file ...
1
vote
1answer
132 views

How to chmod file I have access to, but I'm not the owner of?

First, why can't I do this? % id -un me % ls -l -rw-rw-r--+ bob bob 100 today foo % chmod +x foo chmod: changing permissions of `foo': Operation not permitted % getfacl foo # file: foo # owner: bob # ...
0
votes
2answers
819 views

Windows 8 Command Line Runas sending a password with a bat file

I want to use a .bat file to run a program at the windows 8 command line as 'aaron-desk/administrator'. This account has no password. I've tried the runas command, but this give me an error message ...
2
votes
0answers
714 views

Clean OSX (Mavericks) install: User folder / ACLs / .DocumentRevisions-V100/

I want to do a clean install of OSX Mavericks and manually transfer user-files. Reasons: I have migrated my User-Account over 3 or 4 releases and I want to make sure i don't carry old data or ...
16
votes
2answers
26k views

How to remove read-only attribute recursively on Windows 7

I need to remove read-only attributes of all files under a directory recursively on Windows 7 using command line. I think one can do this using icacls but I couldn't figure exactly how to do it. ...
2
votes
2answers
6k views

Copy security permissions of one file to another

I would like to replicate the permissions of a file to another. I do not want to copy the data, only the permissions. For example, I created a new file and want it to have the same permissions as ...
1
vote
1answer
310 views

Changing access rights of the specific folder for specifeid user

what is the exact analog of the following two commands in linux # chmod -R +a "www-data allow read,delete,write,append,file_inherit,directory_inherit" /path/to/moodledata $ sudo chmod -R ...
3
votes
1answer
195 views

why setting acl for a user changes group perms in ls output?

I'm trying to figure out why the output of ls command has changed. I mean group permissions for a file. I've created a file named "file" and changed its owner&group: [root@training group3]# ...
3
votes
1answer
1k views

Mac OS X ACL and file permissions

I'm trying to share a directory between 2 users, so that both have full access to it and to any files, and directories created within. Here are the things I've done so far: Create a group for the 2 ...
0
votes
1answer
438 views

Why aren't these ACLs working?

I'm trying to set ACLs so that the user and group of new files and directories created in the web server directory are owned by the www-data user. I have the exact same ACL on another server and they ...
1
vote
1answer
102 views

Let a user to run a command as a member of a group he does not belong to, using `sudoers`

How can I let a user U to run a command /usr/bin/C as a member of a group G (while he does not belong to the group G), using sudoers on Debian Wheezy?
0
votes
2answers
209 views

How to make Apache obey to default ACL on Fedora 19?

I have set default ACL to allow me doing anything on newly written files. But Apache seems to ignore that, and I don't have access to newly created files. How to fix that?
1
vote
1answer
155 views

Wake-On-LAN and Access Control List with Mac over Internet

I am researching the best way to wake my computer through a firewall over the internet remotely (the computer to be woken is a Mac). Through external research, I have seen that I should be able to ...
1
vote
1answer
171 views

What is the difference between the read-only attribute and the access control list read-only flag on Windows?

I'm looking for a technical answer, not a general answer, pertaining to how Windows actually handles these properties. For example, there are some programs that recognize the read-only attribute and ...
5
votes
2answers
513 views

Restrict access to a folder by EXE

Is it possible in Windows 7 to restrict which EXEs can access a certain folder? Let's imagine I have a folder (c:\myfolder) with some data files that can only be opened by a certain EXE. For ...
0
votes
0answers
278 views

Prevent copying from specific network locations [duplicate]

A tad unusual question! I need to prevent users from copying (via Ctrl+C / Ctrl+V, Drag+Drop, Edit>Copy / Edit>Paste) from a folder on the local machine. I won't go into details of why, as it's ...
0
votes
1answer
290 views

rsync bullies destination ACLs for fun

I have the following ACLs configured on a directory (.ssh) at the destination of my rsync: # file: .ssh # owner: jsmith # group: jsmith user::rwx user:backup:r-x group::--- group:backup:r-x mask::r-x ...
0
votes
1answer
2k views

users not found in /etc/passwd

I login to a linux box with username user1 and my home folder is in /home. There is another user named user2 that has its home directory in /opt/data/folder. If I want to check the list of users I ...
1
vote
1answer
651 views

FTP, CentOS and SELinux Permissions

I am trying to use vsftpd to allow a user to ftp in and edit files in /var/www/html where most files are owned by apache. So far I have used setsebool to enable system wide ftp, and I've also used ...
-1
votes
2answers
231 views

What's the “all other users” for folder security?

How do I add all other users to this: In the "Enter the object names to select (examples)" field.
2
votes
1answer
144 views

access control list share file but not directory RHEL6

I have a file that I want to be accessible by a single user, but I don't want the user to have access to the folder it resides in. My understanding is that the following steps should work, but they ...
0
votes
1answer
566 views

Permissions Error Time Capsule (can't rsync owned by root:wheel group)

So, I had just flat out erased my Time Capsules 2TB drive and began running a sync script I wrote alongside a Time Machine Backup. They both have been running for over a day without a hitch, but out ...
3
votes
0answers
642 views

How do I restore Windows ACL to default?

A few months ago I got my computer, and instead of sticking with the preinstalled Windows 7 Home Premium and OEM stuff I decided I want a clean install from a DreamSpark disc. At the time I also ...
9
votes
2answers
2k views

How to copy Time Machine volume to another disk using rsync while preserving ACLs?

Recently I had to change my Mac's filesystem from case-preserving to being fully case-sensitive. I did that by using CCC and copying data to another disk, then returning back to newly formatted main ...
1
vote
1answer
297 views

changing ntfs permissions for Windows internal usage, from linux

Troubleshooting an Windows 7 installation. One tactic is to increase permissions on files/directories ACL's (access control lists) for windows, from within windows, so all system data and drivers etc ...
0
votes
1answer
2k views

Understanding chmod and setfacl

I have a file that I think I should be able to execute. It shows these permissions with ls -lah: -rw-rwxr--+ foo foo-group And these with getfacl myfile: # file: app/console # owner: foo # group: ...
0
votes
1answer
227 views

ACLs vs group permissions in linux

I would like to allow a set of students to access a shared web-server. Students work in groups, and each group's home directory contains a www folder that should be accessible to the shared instance ...
0
votes
2answers
6k views

Windows 8 permissions

I am having this really weird problem with Windows 8 where it won't let me edit or save to my program files folder in my C: drive. It keeps telling me access is denied, even when I have taken ...
1
vote
1answer
4k views

Is there a way to allow users to install a specific program without opening full admin rights?

We have an automated builder that creates a "setup.exe" installer file which can then be downloaded by users in our organisation for QA testing. They download the file via a browser from a ...
0
votes
1answer
3k views

Use icacls to make a directory read-only on Windows 7

I'm attempting to test some filesystem exceptions in a Java based application. I need to find a way to create a directory that is located under %TMP% that is set to read-only. Essentially on ...
1
vote
1answer
1k views

How to add full username to a list returned by get-acl?

I want to prepare a list of persons having access to a given folder. The list should also contain the level of access granted. I figured out the following powershell command: Get-Acl ...
0
votes
1answer
564 views

How can I set the default permissions for new files in a directory?

I have a local directory /var/foo I'd like it so that any file created in here can be read and written by any user (and any directory can be rwx). I've tried chacl -b u::rwx,g::rwx,o::rw- ...
0
votes
1answer
1k views

How to let directories inherit the sticky bit and set different default ACLs for directories and files?

First problem: Is it possible to have the sticky bit on directories being inherited for newly created subdirectories? Second problem: How can I set different default ACLs for directories and files, ...
2
votes
0answers
62 views

Mercurial ACL Groups causing 502 error

am setting up my mercurial repo using the ACL extension. When I configure the ACL.deny section I am trying to deny a specific group of users. When blocking them individually ACL works as intended and ...
0
votes
1answer
2k views

Access Control List ACL to Limit an Account

How do I create an ACL in Windows 7 that prevents a public account (called Users) on our Media PC from being able to Read/Write to a particular folder while still allowing me to connect to it over our ...
5
votes
2answers
4k views

Why do you need execute permission on the parent directory to rename a file

On Linux/Unix file-systems, I understand the reason why you need the execute permission on the parent folder to read or write a file: the execute permission gives you access to the inode on the file, ...
5
votes
3answers
670 views

How can I add a user from Windows 8 to an ACL on Windows 7?

The title pretty much says what I want to do. I have a dual-boot setup with Windows 7 and Windows 8. Is there an easier way of doing this? I do not want to takeown the files, just add a user (or two) ...
6
votes
2answers
1k views

Windows with Full Control to Everyone for Everything

Similar to sudo chmod -R 777 /, but for Windows 7. A customer decided he hated the prompts for administrators to continue, so he gave himself Full Control for the Everyone group on Windows 7. Now, ...
0
votes
3answers
3k views

run 'net user' command as administrator

I was writing a simple batch file with the following command net user Abhi * where Abhi is my username and I am the administrator of my computer. On execution, it prompts for a password and then ...
0
votes
1answer
87 views

Delete facl for unnamed user

I accidentally setfacl's for an empty user so that all of my facl's have an unnamed user at the top: # file: test.txt # owner: friend # group: kevinburke user::rw- user:friend:rwx user:kevinburke:rwx ...
0
votes
1answer
554 views

How to create an ACL list on Ubuntu

We are a few people working in an office on a server via SFTP. We all work on the same files so it would be great if we had, by default, read/write access by default on some folders. For example, ...
2
votes
0answers
447 views

File permissions issue with an NFSv4 share, uploaded from a Mac Lion

I have an NFSv4 share that was working fine, with Macs using Snow Leopard, to share files across the network. The NFS share has one cloned user/group that all clients autoconnect as. All files ...
6
votes
2answers
3k views

find files with ACLs set

How can I find all files with some extended ACLs set, i.e. those with a little + at the end of the permission flags shown by ls -l. I could not find a corresponding flag for find. My naive approach ...
4
votes
5answers
728 views

Deny access to Network Adapter in Windows

I have set up a maintenance Network via OpenVPN. However, when I log into a computer (e.g. via remote desktop) and someone else is using it at the same time I have either to accept that she is able to ...
1
vote
2answers
495 views

cygwin can bypass windows xp acls?

How is cygwin able to bypass Windows XP ACLS? In the following example, cmd.exe cannot create a file in a directory but bash can. What gives? C:\WINDOWS\Temp>mkdir noaccess ...
0
votes
1answer
601 views

using setfacl to give access to another user without giving access to a group

I have a user that I use for backup, and I use setfacl to give that user access to files. However, setfacl changes the base ACL entry for group and some applications require that the base ACL entry ...
9
votes
3answers
715 views

Where does the file owner on Windows matter, seeing that there are ACLs?

Coming from a Linux background, I'm used to a file having an owner, and a owning group. Access permissions can be set separately for owner, group, and others, and that's it. Now on (NT-based) ...