Questions tagged [acl]

The ACL is a security and access component of Operating Systems. It contains a set of entries that determine who and what has access to a specified physical or logical system object.

Filter by
Sorted by
Tagged with
0
votes
1answer
18 views

NFSv4 ACL is not applying despite having matching GIDs on server and client

I have a fileserver with nfs exports on it. On the server, I have a media directory that I ran setfacl -m g:44000:rwx media on. The directory is exported with rw,sync,no_subtree_check. On my client, ...
0
votes
0answers
15 views

TimeoutException when using Acls in kafka

I am using kafka kafka-acls to create a rule, but I see this error timeout. Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=test-, patternType=PREFIXED)`: (principal=User:...
0
votes
0answers
13 views

default acl permission for created files for all users

I have follow acl permissions: # file: data/ # owner: root # group: test # flags: -s- user::rwx group::rwx other::r-- default:user::rwx default:group::rwx default:other::r-- Now if i create a new ...
0
votes
1answer
58 views

How to change file permissions on Windows via powershell / cmd?

I want to achieve the permissions aspect equivalent on Windows side via PowerShell or cmd, however I couldn't find a solution in order to correctly do this. If someone could help me to achieve this in ...
0
votes
0answers
23 views

Applying an access control list for FTPS session

I am having trouble understanding ACLs and the logic of inbound and outbound traffic. I am trying to allow network 192.168.1.0/24 to the FTPS server 192.168.3.0/24 only if an FTPS session originates ...
0
votes
0answers
15 views

If ICACLS sets DiscretionaryAclAutoInherited, does that make it a resource manager?

This is a question about the relationship of the ICACLS tool and something called resource managers. We sometimes encounter problems with non-canonical ACL lists in NTFS. What causes them to appear ...
0
votes
1answer
42 views

ACLs on macOS: ACE “deny delete” on macOS with APFS broken? File not writable in GUI

Since the UF_NOUNLINK Unix flag is actively being thwarted by macOS, I was thinking about using a self-made shell script to achieve a similar functionality with an ACL, namely to prevent accidental ...
0
votes
0answers
28 views

How to replace PHP's open_basedir with IIS AppPool permissions?

For years I use the IIS Application Pool Identity to restrict access of PHP (as a FastCGI module) to certain website's folders, and for years I can't understand — why everything is accessible to the ...
0
votes
1answer
104 views

Windows ACL deny move of folders on a hierarchy level

I have the goal to prevent Users from accidentally move or delete folders on one specific hierarchy level of an Windows Server 2019 Share. Example: Two User Groups: Admin and User |-...
1
vote
0answers
105 views

set ACLs on a cifs mounted folder: possible?

In short: I have mounted a CIFS folder from a remote server. I would now like to share this folder with my local samba server, which is part of a domain, using windows ACLs. Is this possible? How ...
1
vote
0answers
44 views

removing users via powershell with multiple domains

I have been trying to clean the permissions on a NAS via powershell for some time but I have hit an annoying problem. presently I use foreach ($entry in $entries) { $acl = (Get-Item $...
0
votes
0answers
105 views

Is there an equivalent to Windows 10 Controlled Folder Access (CFA) for macOS?

I am not looking for an all or nothing control access but rather a solution like Windows implements where the permissions control is BY APP... apps get access to certain folders by permission only. I ...
0
votes
0answers
33 views

Linux ACLs lists

I have a /home/accounting directory and I need to allow some users to share files without having to change permissions or ownership on any file they put in this directory. And then I should restrict ...
0
votes
0answers
76 views

Error with a folder security tab in Windows 10

On an external hard drive I have a folder which seems to have a problem. When I use software on it I have some error message, the only program with can open this folder looks like to be the file ...
0
votes
0answers
18 views

WSL Ubuntu 18.06 LTS - Deny Read & Execute but not Read?

I'm trying to setup an id_rsa key in WSL Ubuntu 18.06 LTS and I want permissions of 600, so u+r only. And I'm told that the Windows FS ACL's override those of Linux. Of course my .ssh directory is ...
0
votes
0answers
64 views

Powershell ACL failing

Errors when running my code below to add Modify access to a folder. I've seen that a common solution is ensuring the AD user exists. I have double check all users I use exists, but continue to get the ...
1
vote
1answer
535 views

Remove ACLs in Linux permissions

I have files that have a plus sign next to the permissions -rwxrwx---+ on a Linux samba server. I found the setfacl command to adjust the acl settings, I would like to remove the ACL completely, ...
0
votes
0answers
24 views

Bulk change of ACL folder owner

We have several thousand folders and sub-folders in quite a complex folder structure which we are backing up. Several hundred of these sub-folders have been flagged during the backup process as ...
0
votes
1answer
114 views

ACLs for a BIND Linux DNS server?

I am working on a BIND DNS server for DNS forwarding. I noticed that you can create an ACL to have trusted clients on the server. Can I configure the BIND server without an ACL, or is it necessary to ...
0
votes
0answers
26 views

Unable to allow two users rw access to a folder

I have a Nextcloud instance set up, with it's /data directory at /srv/files/nextcloud_data. Individual user's files are at /srv/files/nextcloud_data/username-here/files. I'd like to have www-data (...
0
votes
1answer
665 views

How to configure amazon S3 bucket for read-only access to host a static website?

I have a very small (static) website hosted on Amazon S3. Yesterday I received the following message, that had this subject line: Notification of Amazon S3 buckets configured for public access And ...
0
votes
0answers
129 views

Set ACL WSL launch settings for automount

I am trying to set acl mount option on /mnt/c drive. Tried to follow https://docs.microsoft.com/en-us/windows/wsl/wsl-config#set-wsl-launch-settings by setting mountFsTab = true on /etc/wsl.conf ...
0
votes
0answers
86 views

Enable Write Acess to Removable devices while restricting Read Access [Registry/GPO]

I'm trying to achieve this point: Disable Read Access to Removable Devices from Registry / GPO Enable Write Access to Removable Devices from Registry / GPO What I've tried so far: From gpedit.msc ...
0
votes
0answers
69 views

Windows 10: Change SID of local account

I'm in the process of moving to a new computer I bought, and I have a lot of different local accounts for various purposes and a lot of particular permissions set on the filesystem. Long story short, ...
1
vote
1answer
46 views

Router Access Control List to prevent users from using alternate DNS

Thank you to anyone that takes the time to read this, I have an ac750 archer c2 router and I am using OpenDNS. I have set the DNS for the WAN to OpenDNS's servers and I'm trying to follow their ...
3
votes
2answers
652 views

NFSv4 with ACL, the default permissions are not obeyed

1. The question I have a directory dir, which has (NFS) ACL default permissions, so that every file and folder created in it can be written by the user 1001too by default. This directory is shared on ...
0
votes
1answer
40 views

Making group inheritance immutable with extended ACL?

We have a quota management system on our beegfs storage system which tracks group usage of a folder. In this test, the quota is managed for group "fordemx-home", test folder is setup as follows: $ ...
0
votes
0answers
244 views

AWS s3 cross account policy allowing public access

I'm having some difficulty locking down an S3 bucket that I must share across accounts. I have no public ACL defined. "Everyone" has no options enabled. The console bucket list says "Bucket and ...
1
vote
1answer
5k views

What is Special Permissions?

I was checking the security rights for the folder C:\Windows\System32\Tasks and find that Authenticated Users group has Special Permissions (notice that it has no Write permissions): I went into ...
1
vote
0answers
23 views

How to store comments (e.g. reasons) for filesystem permissions? [closed]

I am responsible for manageing filesystem permissions on bunch of a SMB/CIFS shares in a larger company. The NTFS allows me to add entries to the access control lists (ACLs), but I cannot attach ...
2
votes
0answers
124 views

How to restrict other programs from reading a certain file on Windows 10?

Secret files such as ssh private keys are stored in plain on the disk. There is only one user account on my computer. Programs like ssh.exe need to read these files, and I want to view them by text ...
0
votes
1answer
615 views

Setting folders ACL for local groups

i need to grant permissions of a couple of local folders for a specific local group. I'm using System.Security.AccessControl.FileSystemAccessRule. And it looks like this: $aclFolders = Join-Path -...
0
votes
0answers
1k views

Completely restore access control to defaults for WindowsApps folder?

I gave myself ownership of C:/Program Files/WindowsApps so I could poke around in there. I started running into issues though, and tried to give ownership back to NT SERVICE\TrustedInstaller. This ...
0
votes
1answer
566 views

Granting IIS_IUSRS access to a Web Application folder

Trying to add a folder on D:\ as a virtual directory to a Web Site in IIS. "Obviously" I need to add an ACL to the folder for the security principal IIS uses. This appears, most of the time, to be ...
2
votes
1answer
63 views

Why the access check algorithm from “man acl” does not correspond to the actual differentiation of rights?

In man acl says: 2. else if the effective user ID of the process matches the qualifier of any entry of type ACL_USER, then if the matching ACL_USER entry and the ACL_MASK entry ...
-6
votes
1answer
456 views

ACL commands for allowing HTTP [closed]

Practice COMP Tia networking exam: Question 286 A network technician wants to allow HTTP traffic through a stateless frewall. The company uses the 192.168.0.0/24 network. Which of the ...
1
vote
0answers
246 views

Cisco ASA fails to handle service objects with special characters after creation

Issue I have the two ASAs, which are listed in the Meta section. On those devices, I configured ACLs (both devices) and PAT (5506-X only) for a device to be able to perform peer-to-peer file sharing (...
0
votes
0answers
86 views

Does Samba need some kind of permissions/ACLs set on a *subdir*, for that subdir to appear in a list of contents of its *parent*?

I'm on FreeBSD and I've hit a quirky issue, that surprises me. I created a share, and within that share created a subdirectory called subdir. When I open smbclient with current directory = share root,...
3
votes
0answers
130 views

Share a directory with one (not all) other non-root user on Linux (no root privileges)

Is it possible to share a directory with one other non-root user, but only this one, without root privileges? The system is Ubuntu with kernel 4.4.0. I do not have root privileges. The system has a ...
0
votes
0answers
511 views

Business computer needs to be isolated from home network

I have a Linksys E-3000 router connected to port 1 on a TP-Link TL-SG108E EasySmartSwitch (cable modem to router to switch). I have a business workstation connected to port 8 of the switch. I need ...
0
votes
1answer
356 views

UsrClass.dat not loading when booting directly into profile

Came across a strange issue with Windows 7 on 7 April 2018. Suddenly my computer would not load UsrClass.dat due to the file being open. This Means that the desktop is loaded without my personal ...
0
votes
1answer
65 views

Completely hiding a dir, but leaving its descendants accessible via symlinks, in Samba

Due to the way Samba handles symlinks and wide links (it can only distinguish "within the share root" or "outside the share root") I want to create fixed symlinks in the share root to the "actual" ...
2
votes
1answer
512 views

Linux setfacl puzzle

I have a strange issue with some ACL I set for my VMs. My Vms are stored in the directory /shared/vms. The ACLs for this directory are: getfacl . # file: . # owner: root # group: root user::rwx user:...
1
vote
1answer
903 views

Read-only directory on Windows?

Is it possible to create read only directory on windows so I can't create files/directories in it? I've denied all permissions for all users, set folder read-only and I can still create files and ...
0
votes
1answer
158 views

Unable to add myself to any ACL while using Azure AD

When I received a new laptop at the beginning of the week, the initial setup walked me through gaining access to my workplace's domain using my work email address, which is also associated with my ...
-1
votes
1answer
67 views

Ubuntu Mysql can't access from client machine

I have an Ubuntu server running a Mysql Database and I'm tring to connect from a client computer. The problem is that I can't connect because first it gives this error: lost connection to mysql ...
10
votes
6answers
21k views

Reset default ACLs for C:\Program Files\WindowsApps

I had to take ownership of the special folder C:\Program Files\WindowsApps to fix a problem with icons. The issue is now resolved, so I'd like to reset the permissions to the way they were before I ...
1
vote
1answer
68 views

I cloned my hard drive. Can I make ntfs permissions and symlinks go away for another machine?

I recently got a new computer. Because my current computer is kind of faulty, I took the fastest and least painful route to getting the 840+ GB of data on it to an external hard drive to bring to this ...
1
vote
1answer
914 views

Setting default file permissions using setfacl

I need to set the default ACLs on new files created by httpd via the apache service user in such a way that the file is created with the GUID set to the dev users account (which well call devs), and ...
1
vote
0answers
310 views

Default permissions for files within directory when using rsync

I am attempting to configure the file permissions that are set on directories and files when they are created by a specific user/group, but seem to be having a bit of an issue. I have tried setting ...

1
2 3 4 5