Questions tagged [acl]
The ACL is a security and access component of Operating Systems. It contains a set of entries that determine who and what has access to a specified physical or logical system object.
90
questions with no upvoted or accepted answers
3
votes
0
answers
446
views
How to set permanent ACLs on hardware (/dev) devices in systemd?
I tried to prevent a user from accessing the webcam via systemd ACLs, but whatever I set is reset on a new login:
For regular files, this works just fine, with any access by userx to random_file ...
3
votes
3
answers
4k
views
NFSv4 with ACL, the default permissions are not obeyed
1. The question
I have a directory dir, which has (NFS) ACL default permissions, so that every file and folder created in it can be written by the user 1001too by default. This directory is shared on ...
3
votes
0
answers
1k
views
Share a directory with one (not all) other non-root user on Linux (no root privileges)
Is it possible to share a directory with one other non-root user, but only this one, without root privileges?
The system is Ubuntu with kernel 4.4.0.
I do not have root privileges.
The system has a ...
3
votes
0
answers
984
views
How to permanently set acl r-X in a directory and override chmod changes by the owner?
I want to give user 'backup' read-only permissions on a given directory in my Linux system so it can backup all files, regardless of their permissions.
I read about acl and created two test ...
3
votes
1
answer
3k
views
How do I restore Windows ACL to default?
A few months ago I got my computer, and instead of sticking with the preinstalled Windows 7 Home Premium and OEM stuff I decided I want a clean install from a DreamSpark disc. At the time I also ...
2
votes
0
answers
32
views
When managing permissions via network on a remote PC, can't list or add users on the managed PC (no AD): What I am doing wrong?
This is not a duplicate question. Please read thoroughly and completely before closing it. Similar questions or their solutions either are related to AD or did not work. Having said this:
I have two ...
2
votes
0
answers
267
views
Reason and functioning of split NTFS permissions
On a fresh formatted non-system NTFS volume of type hard disk media (unpartitionable USB thumb drive is different) under Windows 10, the NTFS ACEs are as follows (Get-Acl):
FileSystemRights : -...
2
votes
1
answer
3k
views
How to limit the access of a local windows user to only a specific folder?
I've set up an OpenSSH SFTP connection with the help of documentation and WinSCP and want a colleague to be able to upload files to my computer using this SFTP connection.
I've created a new local ...
2
votes
0
answers
7k
views
"In valid argument" when removing permissions with Access Control Lists (ACL)?
This website explains giving and removing the ACL. I have given the permission to another user, and now I want to remove it.
In the screenshot below, the getfacl is used to show that another user has ...
2
votes
1
answer
634
views
Linux setfacl puzzle
I have a strange issue with some ACL I set for my VMs.
My Vms are stored in the directory /shared/vms. The ACLs for this directory are:
getfacl .
# file: .
# owner: root
# group: root
user::rwx
user:...
2
votes
2
answers
5k
views
Stop permissions inheritance of all subfolders in Windows 7
This is in Windows 7.
I have several high level folders. Each high level folder has a whole bunch of subfolders.
I need to assign one group to be "read only" to the high level folders, but "read and ...
2
votes
0
answers
150
views
How to stop existing user appearing in lastlog?
-l, --no-log-init is available in useradd, but not in usermod. How can I modify a user in this manner? And how does it work anyway?
2
votes
0
answers
873
views
Clean OSX (Mavericks) install: User folder / ACLs / .DocumentRevisions-V100/
I want to do a clean install of OSX Mavericks and manually transfer user-files.
Reasons:
I have migrated my User-Account over 3 or 4 releases and I want to make sure i don't carry old data or launch-...
2
votes
0
answers
92
views
Mercurial ACL Groups causing 502 error
am setting up my mercurial repo using the ACL extension. When I configure the ACL.deny section I am trying to deny a specific group of users. When blocking them individually ACL works as intended and ...
2
votes
0
answers
495
views
File permissions issue with an NFSv4 share, uploaded from a Mac Lion
I have an NFSv4 share that was working fine, with Macs using Snow Leopard, to share files across the network. The NFS share has one cloned user/group that all clients autoconnect as. All files ...
1
vote
1
answer
135
views
Windows Process-Wide Security for Java via registry keys
My goal is to configure COM/DCOM security for my Java OPC DA client (not server).
The main problem is that every time the client tries to get updates from a OPC DA server in asynchronous mode, it ...
1
vote
0
answers
110
views
Program, run as admin, can't write log file to folder with admin-only ACLs
I have a folder set up on all of our computers for random log files, configs, etc., deployed with the following PowerShell:
#Create directory if it does not already exist
$path = "C:\Wagner"
...
1
vote
0
answers
205
views
Make a file unreadable for owner on Windows
I am working with the automated test suite of a software project. I have an automated test case that should verify that the code works correctly when a specific file is found, but the program does not ...
1
vote
0
answers
573
views
ZFS NFSv4 ACLs not displaying on the client side
I'm running ZFS [2.0.3] on Debian 10 with NFSv4 shares, setting xattr: on and acltype: posixacl, with my export using zfs set sharenfs being:
rw=@@hosts,async,no_subtree_check,no_root_squash
I can ...
1
vote
0
answers
274
views
xfs acl not preserved after reboot
I'm adding a new xfs partition (/home) to a centos 7 server that has ext3 filesystem.
Old /home is ext3.
After mounting the new partition, I copied the info in the old home to the new home with rsync:...
1
vote
0
answers
268
views
Why is ACL not working as intended in Bash?
I have a directory named music. I have set setgid and sticky bit on music directory.
soubhik@dev:~$ getfacl music/
# file: music/
# owner: soubhik
# group: media
# flags: -st
user::rwx
group::rwx
...
1
vote
0
answers
168
views
Revoke delete permission for particular user in linux
I have to revoke delete permission for particular user in Linux. I have tried ACL it worked but user is able to delete file winscp. My requirement is that user is not able to delete file from PUtty ...
1
vote
0
answers
257
views
Is ACL inheritance only at file creation time on zfs?
I'm having trouble understanding how ACLs work on ZFS as compared to how they work on a Windows NTFS system. (In particular, I'm using a TrueNAS 12.)
I create a SMB share ("smbtest"), and I ...
1
vote
0
answers
2k
views
set ACLs on a cifs mounted folder: possible?
In short: I have mounted a CIFS folder from a remote server. I would now like to share this folder with my local samba server, which is part of a domain, using windows ACLs. Is this possible? How ...
1
vote
0
answers
143
views
removing users via powershell with multiple domains
I have been trying to clean the permissions on a NAS via powershell for some time but I have hit an annoying problem.
presently I use
foreach ($entry in $entries) {
$acl = (Get-Item $...
1
vote
0
answers
1k
views
Error with a folder security tab in Windows 10
On an external hard drive I have a folder which seems to have a problem.
When I use software on it I have some error message, the only program with can open this folder looks like to be the file ...
1
vote
0
answers
584
views
Cisco ASA fails to handle service objects with special characters after creation
Issue
I have the two ASAs, which are listed in the Meta section. On those devices, I configured ACLs (both devices) and PAT (5506-X only) for a device to be able to perform peer-to-peer file sharing (...
1
vote
1
answer
2k
views
Read-only directory on Windows?
Is it possible to create read only directory on windows so I can't create files/directories in it? I've denied all permissions for all users, set folder read-only and I can still create files and ...
1
vote
1
answer
143
views
I cloned my hard drive. Can I make ntfs permissions and symlinks go away for another machine?
I recently got a new computer. Because my current computer is kind of faulty, I took the fastest and least painful route to getting the 840+ GB of data on it to an external hard drive to bring to this ...
1
vote
0
answers
724
views
Default permissions for files within directory when using rsync
I am attempting to configure the file permissions that are set on directories and files when they are created by a specific user/group, but seem to be having a bit of an issue.
I have tried setting ...
1
vote
0
answers
585
views
setfacl up to root directory
I have directory /home/user/test. user2 does not have any access to this directory and /home/user but have rx access to / and /home as "other" user.
I run setfacl -m u:user2:rx /home/user/test. But ...
1
vote
0
answers
119
views
How to setup ACL in Windows share
I need to setup ACL in a windows share folder where:
There is one main folder
Inside this folder there are many subfolders, every users should write/read inside these subfolders what they want
...
1
vote
1
answer
334
views
Force group for new files in NFSv4 ACLs
I have a folder, /srv/share, which I'd like to share between a few users who share a non-primary group (share). I'd like to force that any file and/or directory moved or created into /srv/share are ...
1
vote
0
answers
102
views
Configuring default inheritance of permissions for new directories and files
I have some WordPress websites which have a good set of permissions on it. The problem I'm having is that WordPress is creating new folders (for example for plugins) which have a different set of user/...
1
vote
0
answers
316
views
Preventing ransomware attacks by detecting suspicious levels of file system activity
Assume a Windows 8/10 home/small office system with 3-4 users and a few TB of file share (say 6TB in a suitable RAID). Most files are static, but sometimes files get moved round or modified. But if ...
1
vote
1
answer
1k
views
Tampered with System Volume Information... Now I Need Default Permissions. Doh
I'm using Win7, I changed my SYS-VOL-INFO folder permissions to take a peek inside, and I forgot to take note of the default permisisons (ACL's). I found a website, that isn't Microsoft, that claimed ...
1
vote
0
answers
203
views
Is there a Linux `setfacl --test` equivalent for BSD?
The Linux version of setfacl, as opposed to the BSD version has that very handy --test option:
--test
Test mode. Instead of changing the ACLs of any files, the resulting
ACLs are ...
1
vote
2
answers
3k
views
How can I allow my regular user to chown files, via setfacl?
I am using ACL to set specific permissions in a directory:
setfacl -R -m u:wordpress:wrx /var/www/html/wp
As that user, I am able to create a subdirectory within the directory with mkdir test, but ...
1
vote
0
answers
105
views
Is there a way to use ACL to deny access to folders by user, preferrably by making them invisible?
Is there a way to use Linux's Access Control Lists feature to deny access to folders by user, preferrably by making them invisible? This is needed for a chroot SFTP environment where we want to block ...
1
vote
0
answers
1k
views
Is there anyway you can restrict users from executing a command with another name?
I'm not asking an obvious question here. I would like to elucidate with an example.
A user 'bob' is always executing 'chmod 777 /home/bob/impfiles' so that user 'alice' could make changes to the ...
1
vote
2
answers
235
views
Windows VM is resetting file permissions on CentOS host
I have a CentOS host machine with a Windows 7 virtual machine in VMware. There is a shared drive on the host machine (NFS share with other machines on the network) which has been configured with ACLs ...
1
vote
0
answers
227
views
New File via Dropbox Does Not Inherit Windows Directory Permissions
Environment:
Windows Server 2012
Mac OS 10.6.8
Dropbox
The purpose of the Dropbox share is to allow the user on the Mac to move files into a directory that is served by IIS on the Windows Server ...
1
vote
0
answers
38
views
set ACL for BackupUser
I want to backup a whole bunch of folders from different users remotely. Therefore I created a special user that is able to log into the machine and (should) have the right to read all the files via a ...
1
vote
1
answer
6k
views
Explorer.exe COMRuntime error: unexisting user can't get access permissions to COM server
since explorer has no appid, it's not possible to find relevant DCOM component in Component Services. I tried editing access rights in Elevated-Unelevated Explorer Factory component and editing ...
1
vote
2
answers
2k
views
Changing access rights of the specific folder for specifeid user
what is the exact analog of the following two commands in linux
# chmod -R +a "www-data allow
read,delete,write,append,file_inherit,directory_inherit"
/path/to/moodledata
$ sudo chmod -R +...
1
vote
2
answers
2k
views
FTP, CentOS and SELinux Permissions
I am trying to use vsftpd to allow a user to ftp in and edit files in /var/www/html where most files are owned by apache. So far I have used setsebool to enable system wide ftp, and I've also used ...
1
vote
1
answer
751
views
changing ntfs permissions for Windows internal usage, from linux
Troubleshooting an Windows 7 installation. One tactic is to increase permissions on files/directories ACL's (access control lists) for windows, from within windows, so all system data and drivers etc ...
1
vote
0
answers
46
views
Garage Band and Access Control
The things garage band writes are, in fact, directories.
Changing their access from the 'Get Info' menu changes the directory but not the files therein. I ended up using good old chmod to patch ...
1
vote
1
answer
686
views
ACL mess after rsync on Windows 2008
The permissions in the ACL are not in the right order on some files and directories after having used rsync to synchronize directory trees. The stuff works well as it is on Windows 2003.
Can someone ...
0
votes
0
answers
24
views
Is it possible to temporarily disable or block a samba share without server restart?
I have Linux server hosting separate samba share for users on some windows clients (each user would have a linux client also accessing their share) (users have authenticator app on separate devices). ...