The ACL is a security and access component of Operating Systems. It contains a set of entries that determine who and what has access to a specified physical or logical system object.

learn more… | top users | synonyms

4
votes
2answers
656 views

Use /sys/class/gpio/ in Python without root permissions

I want to interact with the GPIO pins using the Python module Ablib. And I want to do this without root permissions. How can I achieve this? When I create an ablib.Pin instance the module opens /sys/...
1
vote
2answers
118 views

Windows VM is resetting file permissions on CentOS host

I have a CentOS host machine with a Windows 7 virtual machine in VMware. There is a shared drive on the host machine (NFS share with other machines on the network) which has been configured with ACLs ...
1
vote
2answers
713 views

Changing access rights of the specific folder for specifeid user

what is the exact analog of the following two commands in linux # chmod -R +a "www-data allow read,delete,write,append,file_inherit,directory_inherit" /path/to/moodledata $ sudo chmod -R +...
3
votes
1answer
228 views

Stop permissions inheritance of all subfolders in Windows 7

This is in Windows 7. I have several high level folders. Each high level folder has a whole bunch of subfolders. I need to assign one group to be "read only" to the high level folders, but "read and ...
3
votes
1answer
936 views

How do I restore Windows ACL to default?

A few months ago I got my computer, and instead of sticking with the preinstalled Windows 7 Home Premium and OEM stuff I decided I want a clean install from a DreamSpark disc. At the time I also ...
1
vote
1answer
63 views

Why is current CPU frequency read-only for root?

I have a program that provides benchmarks, but its OS agnostic and does not know how to read CPU frequencies. The test program is driven through a script. If I provide the CPU frequency, then the ...
1
vote
1answer
82 views

Linux (POSIX) file ACLs: is it possible to set a default ACL for a single user ONLY?

POSIX file ACLs: is it possible to grant default read access for a specific user to new files/directories within a directory, without setting default ACLs for user::/group::/mask::/other::? On a ...
1
vote
1answer
799 views

FTP, CentOS and SELinux Permissions

I am trying to use vsftpd to allow a user to ftp in and edit files in /var/www/html where most files are owned by apache. So far I have used setsebool to enable system wide ftp, and I've also used ...
1
vote
1answer
453 views

changing ntfs permissions for Windows internal usage, from linux

Troubleshooting an Windows 7 installation. One tactic is to increase permissions on files/directories ACL's (access control lists) for windows, from within windows, so all system data and drivers etc ...
1
vote
1answer
555 views

ACL mess after rsync on Windows 2008

The permissions in the ACL are not in the right order on some files and directories after having used rsync to synchronize directory trees. The stuff works well as it is on Windows 2003. Can someone ...
0
votes
1answer
56 views

Tampered with System Volume Information… Now I Need Default Permissions. Doh

I'm using Win7, I changed my SYS-VOL-INFO folder permissions to take a peek inside, and I forgot to take note of the default permisisons (ACL's). I found a website, that isn't Microsoft, that claimed ...
0
votes
1answer
55 views

How do you set Linux ACL to default to a specific group with permissions?

So I have a directory: www\ which looks as so: [eugene@server ~]$ ll total 0 drwxrwx---. 2 eugene eugene 57 Dec 10 16:04 www I want to make it so all new files created in this directory will ...
0
votes
1answer
653 views

SubInACL using accent in usergroup name returns error 1337

I'm trying to reset my registry permissions to default because something modified it and causing some problems. But when I replace the "Administrators" usergroup name with the translated one which ...
0
votes
1answer
163 views

ACL inter-vlan routing

I need to configure access control list on layer 3 switches for a some school's: Now the PC's from one classroom can access the PC's from the other classroom. How can I configure that they only can ...
0
votes
1answer
236 views

Explorer.exe COMRuntime error: unexisting user can't get access permissions to COM server

since explorer has no appid, it's not possible to find relevant DCOM component in Component Services. I tried editing access rights in Elevated-Unelevated Explorer Factory component and editing ...
0
votes
1answer
752 views

using setfacl to give access to another user without giving access to a group

I have a user that I use for backup, and I use setfacl to give that user access to files. However, setfacl changes the base ACL entry for group and some applications require that the base ACL entry ...
0
votes
1answer
500 views

VMware: Mapping an NTFS drive without security permission restrictions

I have a VMware image of a Windows machine. I can map the drive. However, when I do map it, I don't have permission to read everything on it. (Host OS is Win 7 - I'm running as an Admin with LUA). ...
2
votes
0answers
61 views

Preventing ransomware attacks by detecting suspicious levels of file system activity

Assume a Windows 8/10 home/small office system with 3-4 users and a few TB of file share (say 6TB in a suitable RAID). Most files are static, but sometimes files get moved round or modified. But if ...
2
votes
0answers
790 views

Clean OSX (Mavericks) install: User folder / ACLs / .DocumentRevisions-V100/

I want to do a clean install of OSX Mavericks and manually transfer user-files. Reasons: I have migrated my User-Account over 3 or 4 releases and I want to make sure i don't carry old data or ...
2
votes
0answers
67 views

Mercurial ACL Groups causing 502 error

am setting up my mercurial repo using the ACL extension. When I configure the ACL.deny section I am trying to deny a specific group of users. When blocking them individually ACL works as intended and ...
2
votes
0answers
476 views

File permissions issue with an NFSv4 share, uploaded from a Mac Lion

I have an NFSv4 share that was working fine, with Macs using Snow Leopard, to share files across the network. The NFS share has one cloned user/group that all clients autoconnect as. All files ...
1
vote
0answers
84 views

How do I add add urlacl to already used 443 port?

I am trying to give uralacl to my user ad\user running this command: netsh http add urlacl url=http://+:443/ user=ad\user but getting this error: Url reservation add failed, Error: 183 Cannot ...
1
vote
0answers
161 views

samba4 acl for allowing group access to files created by a user

I've just setup samba4 as an Active Directory domain controller. (samba v4.3.0, installed on ubuntu x64) It's used in a small accounting office. The office has a number of file shares. I've given ...
1
vote
0answers
46 views

Is there a Linux `setfacl --test` equivalent for BSD?

The Linux version of setfacl, as opposed to the BSD version has that very handy --test option: --test Test mode. Instead of changing the ACLs of any files, the resulting ACLs are ...
1
vote
0answers
25 views

Is there a way to use ACL to deny access to folders by user, preferrably by making them invisible?

Is there a way to use Linux's Access Control Lists feature to deny access to folders by user, preferrably by making them invisible? This is needed for a chroot SFTP environment where we want to block ...
1
vote
0answers
131 views

Is there anyway you can restrict users from executing a command with another name?

I'm not asking an obvious question here. I would like to elucidate with an example. A user 'bob' is always executing 'chmod 777 /home/bob/impfiles' so that user 'alice' could make changes to the ...
1
vote
0answers
146 views

New File via Dropbox Does Not Inherit Windows Directory Permissions

Environment: Windows Server 2012 Mac OS 10.6.8 Dropbox The purpose of the Dropbox share is to allow the user on the Mac to move files into a directory that is served by IIS on the Windows Server ...
1
vote
0answers
22 views

How to stop existing user appearing in lastlog?

-l, --no-log-init is available in useradd, but not in usermod. How can I modify a user in this manner? And how does it work anyway?
1
vote
0answers
22 views

set ACL for BackupUser

I want to backup a whole bunch of folders from different users remotely. Therefore I created a special user that is able to log into the machine and (should) have the right to read all the files via a ...
1
vote
0answers
1k views

Squid is ignoring my ACL

Second try: I configured Firefox to use the proxy IP and port, and it worked, so my hypothesis is correct: for some reason, the machine where Squid is running don't send to it the incoming petitions. ...
1
vote
0answers
34 views

Garage Band and Access Control

The things garage band writes are, in fact, directories. Changing their access from the 'Get Info' menu changes the directory but not the files therein. I ended up using good old chmod to patch ...
0
votes
0answers
12 views

How would I pull a list of all files a user has write access to on Samba based on ACLs?

My boss has tasked me with a job that I am unsure how to accomplish. We have a Ubuntu system running Samba in user mode. Over the years, various IT guys at the company have applied ACLs via setfalc to ...
0
votes
0answers
12 views

Can local Allow before local deny - correct canonical form for ACL?

I have been trying to get up to speed with Access Control Lists and feel I have got a little confused understanding what order you can put things in. I get the idea (from the chmod man pages): ...
0
votes
0answers
5 views

Acl setted file deleted and recover automatically in windows

I have set acl on linux share folder. For example if I have share name stock. And in stock share there are two folder Thinclient and Synapse. So for Thinclient I have given permission for rwx with ...
0
votes
0answers
11 views

firewall access list configuration

I am required to configure a "firewall" access list on packet tracer that is supposed to block ping requests, telnet, SSH and FTP traffic sourced from the internet (a random ISP router). So far, I ...
0
votes
0answers
24 views

Disable ACL globally or for a directory only

I have a VM with Debian on it. ACL is enabled. I wanted to ask how I can properly disable it (I know that this might lead to a bunch of permission problems) globally or just for a directory. I'm ...
0
votes
0answers
22 views

Layer 3 switch with ACL or firewall

I have a layer 3 switch with VLANs that have ACL, do I need to get firewall hardware or will ACL do? This is for a home network.
0
votes
0answers
29 views

Directory masks and permissions do not work with centrifydc-samba

I have linux machine with moosefs mounted disks, that are shared to AD and other users via centrifydc-samba daemon. When I modify the umask in my linux cli and then create a folder it behaves as ...
0
votes
0answers
14 views

Dual Booting Windows and SID Issues

Installed a new instance of Win10 on a newly acquired SSD. I want to have the option of still using the existing Win7 instance. Path to how I got to where I am today. Factory installed Win7, used ...
0
votes
0answers
67 views

KVM mounting a directory with p9 driver and right permissions

I run virtual machines with KVM (libvirt) in Ubuntu. So there you can mount a local filesystem of your host machine using p9 drivers (http://wiki.qemu.org/Documentation/9psetup) Now I only found ...
0
votes
0answers
189 views

Clean way to preserve permissions in backups from Linux stored on NTFS

With cygwin, rsync and SSH I have set up a backup mechanism that copies all of the vServers (running Debian) contents to my local NTFS hard drive (running Windows 10) and it works. Partially. I use ...
0
votes
0answers
51 views

OpenZFS ACLs on OSX

I mistakenly did a chmod ug+rwX rather than chmod ug=rwX and have now gained a host of ACLs on the folder and I cannot get rid of them. It is really screwing things up with shared use and rsync to NAS ...
0
votes
0answers
107 views

Setting file permissions doesn't propagate to newly created subdirectories/files

How can I set the ACL permissions for a directory, such that newly created sub-directories and files receive the same read, write, and directory execute permissions as the parent directory? I've ...
0
votes
0answers
31 views

Grant full access to the contents of a directory to a user

I have a directory that has directories created in it, and files created in those directories. There are several layers of directories that are generated. The files and directories are created root:...
0
votes
0answers
193 views

POSIX and ACL permissions Mac Server

I have a mac mini server and have a script run at login for network users that mounts a shared drive on the mac server. When they mount up, I create a folder with their name as the folder name. What ...
0
votes
0answers
109 views

Invalid hostname in HELO sent by MUA

I have a mail server running exim4 with an ACL that drops the smtp session if the hostname in HELO is an IP address. Exim is configured to do the reverse dns check. The said ACL is the very first one ...
0
votes
0answers
238 views

ACL inheritance Hide files, show folders (Windows XP/…/7)

I'm currently trying to set ACLs in way that every people from a folder can access every sub-folder in it but cannot see the files. Is it possible to do this ? Possibly with an inheritance system ? ...
0
votes
0answers
196 views

Exim is ignoring my ACL definitions for blacklists

As I am running several free sites which are CMS - based spammers are massivly attacking me. So I decided to set up my exim4 - installation for blacklisting domains. Exim seems not to care about any ...
0
votes
0answers
27 views

Like a root but not quite the same

Is it possible to create a linux user group that has all other rights just like the root user, with the exception that it can only read files in /var/log folder, but can not change or delete them? Of ...
0
votes
0answers
42 views

No-execute access for file when on server but yes when on desktop

I am trying to set file permissions for an iMovie HD project file to be limited when it's on a server but have full access when it's on the user's desktop. I need to have users be able to copy a file ...