Questions tagged [acl]

The ACL is a security and access component of Operating Systems. It contains a set of entries that determine who and what has access to a specified physical or logical system object.

Filter by
Sorted by
Tagged with
0
votes
0answers
11 views

How to properly configure squid as a child protection

Since hours I'm trying to use squid, as a simple access control for my children to use only certain parts of the internet (8 year old child). Basically, I want to achieve, that parents have full ...
0
votes
1answer
35 views

Registry key in HKLM “invisible” to SYSTEM?

I'm trying to allow all users to execute a scheduled task. The script I found/adjusted works fine when run as an admin, but fails when run as SYSTEM (i.e. as a startup or SCCM script). Walking ...
0
votes
1answer
23 views

Need to block just one MAC address on my D-Link DIR-612 but can't find the setting

My parents have a wireless router (D-Link DIR-612) that is provided for by a local telecommunications company. Recently I've detected a phone's MAC address that doesn't belong to any of our devices ...
1
vote
0answers
18 views

Revoke delete permission for particular user in linux

I have to revoke delete permission for particular user in Linux. I have tried ACL it worked but user is able to delete file winscp. My requirement is that user is not able to delete file from PUtty ...
1
vote
0answers
14 views

Is ACL inheritance only at file creation time on zfs?

I'm having trouble understanding how ACLs work on ZFS as compared to how they work on a Windows NTFS system. (In particular, I'm using a TrueNAS 12.) I create a SMB share ("smbtest"), and I ...
1
vote
1answer
12 views

AWS VPC: Trying to understand how I got all these network ACL rules

Have had a website running on AWS EC2 instances since 2011. Simple configuration using security groups to treat one instance running nginx as a bastion server allowing HTTP and HTTPS access from ...
0
votes
1answer
42 views

How to list all acl permissions set in the system?

with getfacl I can list the ownerships of any file or directory. But I want a list of all the files and directories that have been modified through acl to have more than one owner. I know that getfacl ...
0
votes
1answer
17 views

How to change phantom “inherited” ACE on existing folder?

I unjoined my PC from a Windows domain and converted my profile from domain to local using ForensIT's ProfWiz. Now some apps are giving me an "Access Denied" error on their ProgramData ...
1
vote
1answer
27 views

How to set ACL permissions freebsd

unix# setfacl -d -m group:smid_r:r /dat/samba/data/user/smit setfacl: /dat/samba/data/user/smit: acl_calc_mask() failed: Invalid argument setfacl: /dat/samba/data/user/smit: failed to set ACL mask ...
0
votes
0answers
26 views

Cannot ssh anymore (even with root) after applied recursive access ACL (rw) on the /etc directory for a specific user

How would you solve this Linux certification exam task? May you try on your VM and then try ssh to remote host or localhost? The task is: Create the user leila. Ensure that user leila has permissions ...
3
votes
0answers
40 views

How to set permanent ACLs on hardware (/dev) devices in systemd?

I tried to prevent a user from accessing the webcam via systemd ACLs, but whatever I set is reset on a new login: For regular files, this works just fine, with any access by userx to random_file ...
0
votes
0answers
10 views

What does mean .ro in “default:group:mygroup.ro:r-x” ACL value

I read a lot of documentation about ACL, i think my question is not about it... But i don't know what to search. The command getfacl . return # file: . # owner: myuser # group: www-data user::rwx ...
0
votes
0answers
41 views

ACL(permission) in NFS

I am trying to create a shared folder using NFS. If a user creates a file in that folder, I want to allow all people with the same group privileges to edit it. However, when the file is created ...
0
votes
0answers
202 views

How to set default owner/group/permissions for new files created in windows explorer on synology?

I'm thoroughly confused. I have a headless Ubuntu 18.04 server that I use primarily for media purposes I have a synology NAS for storing the media files I generally do my work from a Windows 10 ...
0
votes
1answer
189 views

How to limit the access of a local windows user to only a specific folder?

I've set up an OpenSSH SFTP connection with the help of documentation and WinSCP and want a colleague to be able to upload files to my computer using this SFTP connection. I've created a new local ...
0
votes
1answer
79 views

Using BIND With Different Nameservers for Different Devices

I am running pfSense with BIND installed. On that machine, for a subnet of devices, I want the requests to go to OpenDNS and add my own records that would take precedence over OpenDNS. For the rest of ...
0
votes
0answers
23 views

How can you prevent root from removing the immutable flag?

I would like to prevent root from removing the immutable (or appendable) flag until reboot. In the past this was possible with lcap CAP_LINUX_IMMUTABLE. But this possibility seems to have been removed....
0
votes
0answers
442 views

“In valid argument” when removing permissions with Access Control Lists (ACL)?

This website explains giving and removing the ACL. I have given the permission to another user, and now I want to remove it. In the screenshot below, the getfacl is used to show that another user has ...
1
vote
1answer
19 views

How to completely remove a keyboard layout from windows

I have a software that, when run, automatically adds a specific keyboard layout Is there any way to prevent this? some sort of lock on windows' keyboard layout list? or some sort of permission ...
0
votes
1answer
101 views

NFSv4 ACL is not applying despite having matching GIDs on server and client

I have a fileserver with nfs exports on it. On the server, I have a media directory that I ran setfacl -m g:44000:rwx media on. The directory is exported with rw,sync,no_subtree_check. On my client, ...
0
votes
1answer
2k views

How to change file permissions on Windows via powershell / cmd?

I want to achieve the permissions aspect equivalent on Windows side via PowerShell or cmd, however I couldn't find a solution in order to correctly do this. If someone could help me to achieve this in ...
1
vote
1answer
129 views

ACLs on macOS: ACE “deny delete” on macOS with APFS broken? File not writable in GUI

Since the UF_NOUNLINK Unix flag is actively being thwarted by macOS, I was thinking about using a self-made shell script to achieve a similar functionality with an ACL, namely to prevent accidental ...
0
votes
1answer
777 views

Windows ACL deny move of folders on a hierarchy level

I have the goal to prevent Users from accidentally move or delete folders on one specific hierarchy level of an Windows Server 2019 Share. Example: Two User Groups: Admin and User |-...
1
vote
0answers
796 views

set ACLs on a cifs mounted folder: possible?

In short: I have mounted a CIFS folder from a remote server. I would now like to share this folder with my local samba server, which is part of a domain, using windows ACLs. Is this possible? How ...
1
vote
0answers
67 views

removing users via powershell with multiple domains

I have been trying to clean the permissions on a NAS via powershell for some time but I have hit an annoying problem. presently I use foreach ($entry in $entries) { $acl = (Get-Item $...
0
votes
0answers
33 views

Linux ACLs lists

I have a /home/accounting directory and I need to allow some users to share files without having to change permissions or ownership on any file they put in this directory. And then I should restrict ...
0
votes
0answers
339 views

Error with a folder security tab in Windows 10

On an external hard drive I have a folder which seems to have a problem. When I use software on it I have some error message, the only program with can open this folder looks like to be the file ...
0
votes
0answers
28 views

WSL Ubuntu 18.06 LTS - Deny Read & Execute but not Read?

I'm trying to setup an id_rsa key in WSL Ubuntu 18.06 LTS and I want permissions of 600, so u+r only. And I'm told that the Windows FS ACL's override those of Linux. Of course my .ssh directory is ...
0
votes
0answers
124 views

Powershell ACL failing

Errors when running my code below to add Modify access to a folder. I've seen that a common solution is ensuring the AD user exists. I have double check all users I use exists, but continue to get the ...
3
votes
1answer
6k views

Remove ACLs in Linux permissions

I have files that have a plus sign next to the permissions -rwxrwx---+ on a Linux samba server. I found the setfacl command to adjust the acl settings, I would like to remove the ACL completely, ...
0
votes
0answers
38 views

Bulk change of ACL folder owner

We have several thousand folders and sub-folders in quite a complex folder structure which we are backing up. Several hundred of these sub-folders have been flagged during the backup process as ...
0
votes
1answer
177 views

ACLs for a BIND Linux DNS server?

I am working on a BIND DNS server for DNS forwarding. I noticed that you can create an ACL to have trusted clients on the server. Can I configure the BIND server without an ACL, or is it necessary to ...
1
vote
1answer
1k views

How to configure amazon S3 bucket for read-only access to host a static website?

I have a very small (static) website hosted on Amazon S3. Yesterday I received the following message, that had this subject line: Notification of Amazon S3 buckets configured for public access And ...
0
votes
0answers
105 views

Enable Write Acess to Removable devices while restricting Read Access [Registry/GPO]

I'm trying to achieve this point: Disable Read Access to Removable Devices from Registry / GPO Enable Write Access to Removable Devices from Registry / GPO What I've tried so far: From gpedit.msc ...
1
vote
1answer
48 views

Router Access Control List to prevent users from using alternate DNS

Thank you to anyone that takes the time to read this, I have an ac750 archer c2 router and I am using OpenDNS. I have set the DNS for the WAN to OpenDNS's servers and I'm trying to follow their ...
3
votes
3answers
1k views

NFSv4 with ACL, the default permissions are not obeyed

1. The question I have a directory dir, which has (NFS) ACL default permissions, so that every file and folder created in it can be written by the user 1001too by default. This directory is shared on ...
0
votes
1answer
79 views

Making group inheritance immutable with extended ACL?

We have a quota management system on our beegfs storage system which tracks group usage of a folder. In this test, the quota is managed for group "fordemx-home", test folder is setup as follows: $ ...
3
votes
2answers
10k views

What is Special Permissions?

I was checking the security rights for the folder C:\Windows\System32\Tasks and find that Authenticated Users group has Special Permissions (notice that it has no Write permissions): I went into ...
1
vote
0answers
23 views

How to store comments (e.g. reasons) for filesystem permissions? [closed]

I am responsible for manageing filesystem permissions on bunch of a SMB/CIFS shares in a larger company. The NTFS allows me to add entries to the access control lists (ACLs), but I cannot attach ...
3
votes
1answer
291 views

How to restrict other programs from reading a certain file on Windows 10?

Secret files such as ssh private keys are stored in plain on the disk. There is only one user account on my computer. Programs like ssh.exe need to read these files, and I want to view them by text ...
0
votes
1answer
799 views

Setting folders ACL for local groups

i need to grant permissions of a couple of local folders for a specific local group. I'm using System.Security.AccessControl.FileSystemAccessRule. And it looks like this: $aclFolders = Join-Path -...
0
votes
0answers
2k views

Completely restore access control to defaults for WindowsApps folder?

I gave myself ownership of C:/Program Files/WindowsApps so I could poke around in there. I started running into issues though, and tried to give ownership back to NT SERVICE\TrustedInstaller. This ...
0
votes
1answer
837 views

Granting IIS_IUSRS access to a Web Application folder

Trying to add a folder on D:\ as a virtual directory to a Web Site in IIS. "Obviously" I need to add an ACL to the folder for the security principal IIS uses. This appears, most of the time, to be ...
2
votes
1answer
70 views

Why the access check algorithm from “man acl” does not correspond to the actual differentiation of rights?

In man acl says: 2. else if the effective user ID of the process matches the qualifier of any entry of type ACL_USER, then if the matching ACL_USER entry and the ACL_MASK entry ...
-6
votes
1answer
688 views

ACL commands for allowing HTTP [closed]

Practice COMP Tia networking exam: Question 286 A network technician wants to allow HTTP traffic through a stateless frewall. The company uses the 192.168.0.0/24 network. Which of the ...
1
vote
0answers
313 views

Cisco ASA fails to handle service objects with special characters after creation

Issue I have the two ASAs, which are listed in the Meta section. On those devices, I configured ACLs (both devices) and PAT (5506-X only) for a device to be able to perform peer-to-peer file sharing (...
0
votes
0answers
88 views

Does Samba need some kind of permissions/ACLs set on a *subdir*, for that subdir to appear in a list of contents of its *parent*?

I'm on FreeBSD and I've hit a quirky issue, that surprises me. I created a share, and within that share created a subdirectory called subdir. When I open smbclient with current directory = share root,...
3
votes
0answers
305 views

Share a directory with one (not all) other non-root user on Linux (no root privileges)

Is it possible to share a directory with one other non-root user, but only this one, without root privileges? The system is Ubuntu with kernel 4.4.0. I do not have root privileges. The system has a ...
0
votes
1answer
400 views

UsrClass.dat not loading when booting directly into profile

Came across a strange issue with Windows 7 on 7 April 2018. Suddenly my computer would not load UsrClass.dat due to the file being open. This Means that the desktop is loaded without my personal ...
0
votes
1answer
66 views

Completely hiding a dir, but leaving its descendants accessible via symlinks, in Samba

Due to the way Samba handles symlinks and wide links (it can only distinguish "within the share root" or "outside the share root") I want to create fixed symlinks in the share root to the "actual" ...

1
2 3 4 5 6