Questions tagged [acl]

The ACL is a security and access component of Operating Systems. It contains a set of entries that determine who and what has access to a specified physical or logical system object.

90 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
3 votes
0 answers
446 views

How to set permanent ACLs on hardware (/dev) devices in systemd?

I tried to prevent a user from accessing the webcam via systemd ACLs, but whatever I set is reset on a new login: For regular files, this works just fine, with any access by userx to random_file ...
David Nemeskey's user avatar
3 votes
3 answers
4k views

NFSv4 with ACL, the default permissions are not obeyed

1. The question I have a directory dir, which has (NFS) ACL default permissions, so that every file and folder created in it can be written by the user 1001too by default. This directory is shared on ...
Gabor's user avatar
  • 31
3 votes
0 answers
1k views

Share a directory with one (not all) other non-root user on Linux (no root privileges)

Is it possible to share a directory with one other non-root user, but only this one, without root privileges? The system is Ubuntu with kernel 4.4.0. I do not have root privileges. The system has a ...
0range's user avatar
  • 810
3 votes
0 answers
984 views

How to permanently set acl r-X in a directory and override chmod changes by the owner?

I want to give user 'backup' read-only permissions on a given directory in my Linux system so it can backup all files, regardless of their permissions. I read about acl and created two test ...
John Z's user avatar
  • 46
3 votes
1 answer
3k views

How do I restore Windows ACL to default?

A few months ago I got my computer, and instead of sticking with the preinstalled Windows 7 Home Premium and OEM stuff I decided I want a clean install from a DreamSpark disc. At the time I also ...
cyanic's user avatar
  • 319
2 votes
0 answers
32 views

When managing permissions via network on a remote PC, can't list or add users on the managed PC (no AD): What I am doing wrong?

This is not a duplicate question. Please read thoroughly and completely before closing it. Similar questions or their solutions either are related to AD or did not work. Having said this: I have two ...
Binarus's user avatar
  • 1,775
2 votes
0 answers
267 views

Reason and functioning of split NTFS permissions

On a fresh formatted non-system NTFS volume of type hard disk media (unpartitionable USB thumb drive is different) under Windows 10, the NTFS ACEs are as follows (Get-Acl): FileSystemRights : -...
Hermjard's user avatar
2 votes
1 answer
3k views

How to limit the access of a local windows user to only a specific folder?

I've set up an OpenSSH SFTP connection with the help of documentation and WinSCP and want a colleague to be able to upload files to my computer using this SFTP connection. I've created a new local ...
Anton's user avatar
  • 121
2 votes
0 answers
7k views

"In valid argument" when removing permissions with Access Control Lists (ACL)?

This website explains giving and removing the ACL. I have given the permission to another user, and now I want to remove it. In the screenshot below, the getfacl is used to show that another user has ...
lanselibai's user avatar
2 votes
1 answer
634 views

Linux setfacl puzzle

I have a strange issue with some ACL I set for my VMs. My Vms are stored in the directory /shared/vms. The ACLs for this directory are: getfacl . # file: . # owner: root # group: root user::rwx user:...
Peter's user avatar
  • 319
2 votes
2 answers
5k views

Stop permissions inheritance of all subfolders in Windows 7

This is in Windows 7. I have several high level folders. Each high level folder has a whole bunch of subfolders. I need to assign one group to be "read only" to the high level folders, but "read and ...
Tom Spoon's user avatar
2 votes
0 answers
150 views

How to stop existing user appearing in lastlog?

-l, --no-log-init is available in useradd, but not in usermod. How can I modify a user in this manner? And how does it work anyway?
rogerovo's user avatar
  • 416
2 votes
0 answers
873 views

Clean OSX (Mavericks) install: User folder / ACLs / .DocumentRevisions-V100/

I want to do a clean install of OSX Mavericks and manually transfer user-files. Reasons: I have migrated my User-Account over 3 or 4 releases and I want to make sure i don't carry old data or launch-...
Fabian Zeindl's user avatar
2 votes
0 answers
92 views

Mercurial ACL Groups causing 502 error

am setting up my mercurial repo using the ACL extension. When I configure the ACL.deny section I am trying to deny a specific group of users. When blocking them individually ACL works as intended and ...
Matt's user avatar
  • 121
2 votes
0 answers
495 views

File permissions issue with an NFSv4 share, uploaded from a Mac Lion

I have an NFSv4 share that was working fine, with Macs using Snow Leopard, to share files across the network. The NFS share has one cloned user/group that all clients autoconnect as. All files ...
POP.sicle's user avatar
1 vote
1 answer
135 views

Windows Process-Wide Security for Java via registry keys

My goal is to configure COM/DCOM security for my Java OPC DA client (not server). The main problem is that every time the client tries to get updates from a OPC DA server in asynchronous mode, it ...
devaskim's user avatar
  • 111
1 vote
0 answers
110 views

Program, run as admin, can't write log file to folder with admin-only ACLs

I have a folder set up on all of our computers for random log files, configs, etc., deployed with the following PowerShell: #Create directory if it does not already exist $path = "C:\Wagner" ...
Emilio Garcia's user avatar
1 vote
0 answers
205 views

Make a file unreadable for owner on Windows

I am working with the automated test suite of a software project. I have an automated test case that should verify that the code works correctly when a specific file is found, but the program does not ...
magicus's user avatar
  • 11
1 vote
0 answers
573 views

ZFS NFSv4 ACLs not displaying on the client side

I'm running ZFS [2.0.3] on Debian 10 with NFSv4 shares, setting xattr: on and acltype: posixacl, with my export using zfs set sharenfs being: rw=@@hosts,async,no_subtree_check,no_root_squash I can ...
user1398's user avatar
1 vote
0 answers
274 views

xfs acl not preserved after reboot

I'm adding a new xfs partition (/home) to a centos 7 server that has ext3 filesystem. Old /home is ext3. After mounting the new partition, I copied the info in the old home to the new home with rsync:...
Sven Knowles's user avatar
1 vote
0 answers
268 views

Why is ACL not working as intended in Bash?

I have a directory named music. I have set setgid and sticky bit on music directory. soubhik@dev:~$ getfacl music/ # file: music/ # owner: soubhik # group: media # flags: -st user::rwx group::rwx ...
sushruta19's user avatar
1 vote
0 answers
168 views

Revoke delete permission for particular user in linux

I have to revoke delete permission for particular user in Linux. I have tried ACL it worked but user is able to delete file winscp. My requirement is that user is not able to delete file from PUtty ...
Neha's user avatar
  • 11
1 vote
0 answers
257 views

Is ACL inheritance only at file creation time on zfs?

I'm having trouble understanding how ACLs work on ZFS as compared to how they work on a Windows NTFS system. (In particular, I'm using a TrueNAS 12.) I create a SMB share ("smbtest"), and I ...
Daniel's user avatar
  • 123
1 vote
0 answers
2k views

set ACLs on a cifs mounted folder: possible?

In short: I have mounted a CIFS folder from a remote server. I would now like to share this folder with my local samba server, which is part of a domain, using windows ACLs. Is this possible? How ...
Megauser's user avatar
1 vote
0 answers
143 views

removing users via powershell with multiple domains

I have been trying to clean the permissions on a NAS via powershell for some time but I have hit an annoying problem. presently I use foreach ($entry in $entries) { $acl = (Get-Item $...
Naib's user avatar
  • 264
1 vote
0 answers
1k views

Error with a folder security tab in Windows 10

On an external hard drive I have a folder which seems to have a problem. When I use software on it I have some error message, the only program with can open this folder looks like to be the file ...
Fractale's user avatar
  • 647
1 vote
0 answers
584 views

Cisco ASA fails to handle service objects with special characters after creation

Issue I have the two ASAs, which are listed in the Meta section. On those devices, I configured ACLs (both devices) and PAT (5506-X only) for a device to be able to perform peer-to-peer file sharing (...
Kevin K.'s user avatar
  • 178
1 vote
1 answer
2k views

Read-only directory on Windows?

Is it possible to create read only directory on windows so I can't create files/directories in it? I've denied all permissions for all users, set folder read-only and I can still create files and ...
Michal Vala's user avatar
1 vote
1 answer
143 views

I cloned my hard drive. Can I make ntfs permissions and symlinks go away for another machine?

I recently got a new computer. Because my current computer is kind of faulty, I took the fastest and least painful route to getting the 840+ GB of data on it to an external hard drive to bring to this ...
Colton Hill's user avatar
1 vote
0 answers
724 views

Default permissions for files within directory when using rsync

I am attempting to configure the file permissions that are set on directories and files when they are created by a specific user/group, but seem to be having a bit of an issue. I have tried setting ...
nullReference's user avatar
1 vote
0 answers
585 views

setfacl up to root directory

I have directory /home/user/test. user2 does not have any access to this directory and /home/user but have rx access to / and /home as "other" user. I run setfacl -m u:user2:rx /home/user/test. But ...
mixel's user avatar
  • 471
1 vote
0 answers
119 views

How to setup ACL in Windows share

I need to setup ACL in a windows share folder where: There is one main folder Inside this folder there are many subfolders, every users should write/read inside these subfolders what they want ...
Tobia's user avatar
  • 2,261
1 vote
1 answer
334 views

Force group for new files in NFSv4 ACLs

I have a folder, /srv/share, which I'd like to share between a few users who share a non-primary group (share). I'd like to force that any file and/or directory moved or created into /srv/share are ...
monotux's user avatar
  • 1,777
1 vote
0 answers
102 views

Configuring default inheritance of permissions for new directories and files

I have some WordPress websites which have a good set of permissions on it. The problem I'm having is that WordPress is creating new folders (for example for plugins) which have a different set of user/...
willemdh's user avatar
  • 123
1 vote
0 answers
316 views

Preventing ransomware attacks by detecting suspicious levels of file system activity

Assume a Windows 8/10 home/small office system with 3-4 users and a few TB of file share (say 6TB in a suitable RAID). Most files are static, but sometimes files get moved round or modified. But if ...
Stilez's user avatar
  • 1,685
1 vote
1 answer
1k views

Tampered with System Volume Information... Now I Need Default Permissions. Doh

I'm using Win7, I changed my SYS-VOL-INFO folder permissions to take a peek inside, and I forgot to take note of the default permisisons (ACL's). I found a website, that isn't Microsoft, that claimed ...
whatever1234566's user avatar
1 vote
0 answers
203 views

Is there a Linux `setfacl --test` equivalent for BSD?

The Linux version of setfacl, as opposed to the BSD version has that very handy --test option: --test Test mode. Instead of changing the ACLs of any files, the resulting ACLs are ...
astorije's user avatar
  • 111
1 vote
2 answers
3k views

How can I allow my regular user to chown files, via setfacl?

I am using ACL to set specific permissions in a directory: setfacl -R -m u:wordpress:wrx /var/www/html/wp As that user, I am able to create a subdirectory within the directory with mkdir test, but ...
morleyc's user avatar
  • 222
1 vote
0 answers
105 views

Is there a way to use ACL to deny access to folders by user, preferrably by making them invisible?

Is there a way to use Linux's Access Control Lists feature to deny access to folders by user, preferrably by making them invisible? This is needed for a chroot SFTP environment where we want to block ...
kinesis's user avatar
  • 11
1 vote
0 answers
1k views

Is there anyway you can restrict users from executing a command with another name?

I'm not asking an obvious question here. I would like to elucidate with an example. A user 'bob' is always executing 'chmod 777 /home/bob/impfiles' so that user 'alice' could make changes to the ...
rajadhiraja's user avatar
1 vote
2 answers
235 views

Windows VM is resetting file permissions on CentOS host

I have a CentOS host machine with a Windows 7 virtual machine in VMware. There is a shared drive on the host machine (NFS share with other machines on the network) which has been configured with ACLs ...
David K's user avatar
  • 341
1 vote
0 answers
227 views

New File via Dropbox Does Not Inherit Windows Directory Permissions

Environment: Windows Server 2012 Mac OS 10.6.8 Dropbox The purpose of the Dropbox share is to allow the user on the Mac to move files into a directory that is served by IIS on the Windows Server ...
Tyler Forsythe's user avatar
1 vote
0 answers
38 views

set ACL for BackupUser

I want to backup a whole bunch of folders from different users remotely. Therefore I created a special user that is able to log into the machine and (should) have the right to read all the files via a ...
David Feurle's user avatar
1 vote
1 answer
6k views

Explorer.exe COMRuntime error: unexisting user can't get access permissions to COM server

since explorer has no appid, it's not possible to find relevant DCOM component in Component Services. I tried editing access rights in Elevated-Unelevated Explorer Factory component and editing ...
EventViewer's user avatar
1 vote
2 answers
2k views

Changing access rights of the specific folder for specifeid user

what is the exact analog of the following two commands in linux # chmod -R +a "www-data allow read,delete,write,append,file_inherit,directory_inherit" /path/to/moodledata $ sudo chmod -R +...
Nusrat Nuriyev's user avatar
1 vote
2 answers
2k views

FTP, CentOS and SELinux Permissions

I am trying to use vsftpd to allow a user to ftp in and edit files in /var/www/html where most files are owned by apache. So far I have used setsebool to enable system wide ftp, and I've also used ...
Peter's user avatar
  • 11
1 vote
1 answer
751 views

changing ntfs permissions for Windows internal usage, from linux

Troubleshooting an Windows 7 installation. One tactic is to increase permissions on files/directories ACL's (access control lists) for windows, from within windows, so all system data and drivers etc ...
user108754's user avatar
1 vote
0 answers
46 views

Garage Band and Access Control

The things garage band writes are, in fact, directories. Changing their access from the 'Get Info' menu changes the directory but not the files therein. I ended up using good old chmod to patch ...
bmargulies's user avatar
  • 1,151
1 vote
1 answer
686 views

ACL mess after rsync on Windows 2008

The permissions in the ACL are not in the right order on some files and directories after having used rsync to synchronize directory trees. The stuff works well as it is on Windows 2003. Can someone ...
jdehaan's user avatar
  • 923
0 votes
0 answers
24 views

Is it possible to temporarily disable or block a samba share without server restart?

I have Linux server hosting separate samba share for users on some windows clients (each user would have a linux client also accessing their share) (users have authenticator app on separate devices). ...
ift-436t's user avatar