Questions tagged [acl]

The ACL is a security and access component of Operating Systems. It contains a set of entries that determine who and what has access to a specified physical or logical system object.

Filter by
Sorted by
Tagged with
0 votes
0 answers
27 views

How do I apply the acl permissions for ALL files (those in sub-directories too) without changing folder permissions?

Need to give new user acl permissions on linux server without changing existing chmod permissions. New user doesn't belong to any group and doesn't own files. User needs to be able to write and read ...
user avatar
  • 1
0 votes
0 answers
43 views

How can I allow all users to read/write/modify/delete files on Samba share? (re: home network)

I'm having difficulty understanding file/directory permissions especially with Samba. On my server (Debian 11, Samba 4.13.13), I've created several different users and added them to samba (ie. ...
user avatar
  • 1,175
0 votes
0 answers
25 views

ACL for web browsing only

I have a TP-Link ER605 connected to my Comcast Business router. The firewall on the Comcast router is set up and working fine. Unfortunately, the TP-Link's ACL is either missing something or ...
user avatar
0 votes
0 answers
42 views

Linux ACLs unexpected behaviour on Debian 11

I'm trying to build a SOHO nas these are the non negotiable requirements from the customer System OS: Debian 11 Sharing method: Samba standalone server Access Management: through sharing group ...
user avatar
0 votes
0 answers
36 views

How to keep group ownership when copying files with file explorer

I have sensitive files/directories in let's say, t:\supersecret. Files must retain their restricted group ownership even if they get copied to t:\public1 (open permissions area) by mistake. Windows ...
user avatar
  • 1
0 votes
0 answers
42 views

Windows maintain explicit ACL of sub folder when copying

We use a master project folder when creating new projects, one of the sub-folders has explicit access restrictions that are different to the containing folder. That ACL is lost when you copy and paste ...
user avatar
0 votes
0 answers
62 views

How to remove a folder with «everyone deny delete»?

I choose to sync my documents with iCloud in OS X. Because it created unattended and unepected changes, I preferred not to sync with iCloud. A remnant folder was left at the first level of MyUser and ...
user avatar
0 votes
0 answers
48 views

Start menu won't open after running icacls /reset

I followed a poor recommendation on how to fix voice recorder as I explained in this thread Apps located on WindowsApps folder won't open after I deleted the folders from one of the apps inside I ...
user avatar
  • 113
1 vote
0 answers
104 views

ZFS NFSv4 ACLs not displaying on the client side

I'm running ZFS [2.0.3] on Debian 10 with NFSv4 shares, setting xattr: on and acltype: posixacl, with my export using zfs set sharenfs being: rw=@@hosts,async,no_subtree_check,no_root_squash I can ...
user avatar
1 vote
1 answer
45 views

How do I recursively add ACL settings identical to the owners' for another user

I have a directory tree (in a Linux system) at "/opt/cudasamples" owned by root. I wish to be able to change contents (files and subdirectories) of this directory as a normal user, i.e. ...
user avatar
1 vote
0 answers
37 views

xfs acl not preserved after reboot

I'm adding a new xfs partition (/home) to a centos 7 server that has ext3 filesystem. Old /home is ext3. After mounting the new partition, I copied the info in the old home to the new home with rsync:...
user avatar
0 votes
1 answer
248 views

Deny Permission to Folders and Files

I need to Deny an group to C:\Windows\Installer folder/files I try to use following but it only applies to folder but not all of the files, it is applying to some files $path = "C:\Windows\...
user avatar
  • 85
1 vote
0 answers
41 views

Why is ACL not working as intended in Bash?

I have a directory named music. I have set setgid and sticky bit on music directory. soubhik@dev:~$ getfacl music/ # file: music/ # owner: soubhik # group: media # flags: -st user::rwx group::rwx ...
user avatar
0 votes
1 answer
74 views

How to remove ACL functionality altogether in Windows 10 / NTFS?

Recently saw some interesting benchmarks of Early Windows 11 WSL2 Performance vs Native Ubuntu Linux vs Windows 10. Some comments about this seem to indicate a belief that Windows' ACL implementation ...
user avatar
0 votes
0 answers
21 views

Folder properties Security tab is not responding

Each time I open this tab the "Advanced" button is disabled and whole dialog hangs for a minute. Is there any fix for this?
user avatar
  • 180
0 votes
0 answers
33 views

Is there an equivalent to rsync --archive --files-from= on Windows?

I would like to copy selected paths from source to destination directory including all metadata and ACLs. Is it possible using Windows CLI? robocopy src dst /E /COPY:DATSO /SECFIX /TIMFIX /sl /TS /FP ...
user avatar
0 votes
1 answer
170 views

'Everyone' permissions on windows folders

i've noticed the following folders have everyone permissions: c:/Windows/System32/DriverStore c:/Windows/System32/spool Is this default Windows behavior or some kind of ugly fix? If the mentioned ...
user avatar
1 vote
0 answers
100 views

Reason and functioning of split NTFS permissions

On a fresh formatted non-system NTFS volume of type hard disk media (unpartitionable USB thumb drive is different) under Windows 10, the NTFS ACEs are as follows (Get-Acl): FileSystemRights : -...
user avatar
0 votes
0 answers
106 views

Can't take ownership of file as NT-Authority\System, can't read/write, cant reset ACLs

I've got a folder inside my work git repo, a script in WSL terminated while writing out a packfile and it seems to have corrupted ACLs that don't have any visible owner authority. PS C:\Users\alice\...
user avatar
  • 121
1 vote
1 answer
75 views

How to exactly “protect” a folder from Windows Media Player (preventing it from messing up album covers)

I struggle with the following two instructions mentioned on on this blog post for Windows Media Player 12 shows wrong cover art when playing Then (separately, else you won't get the Security tab) ...
user avatar
  • 301
0 votes
0 answers
10 views

How to "protect" a folder from Windows Media Player (preventing it from messing up album covers) [duplicate]

In addition to Windows Media Player 12 shows wrong cover art when playing I would like to try option 1 from the accepted answer, but I don't know how to protect a folder, i.e. deny rights with ACL. ...
user avatar
  • 301
0 votes
1 answer
315 views

Registry key in HKLM "invisible" to SYSTEM?

I'm trying to allow all users to execute a scheduled task. The script I found/adjusted works fine when run as an admin, but fails when run as SYSTEM (i.e. as a startup or SCCM script). Walking ...
user avatar
0 votes
1 answer
333 views

Need to block just one MAC address on my D-Link DIR-612 but can't find the setting

My parents have a wireless router (D-Link DIR-612) that is provided for by a local telecommunications company. Recently I've detected a phone's MAC address that doesn't belong to any of our devices ...
user avatar
1 vote
0 answers
27 views

Revoke delete permission for particular user in linux

I have to revoke delete permission for particular user in Linux. I have tried ACL it worked but user is able to delete file winscp. My requirement is that user is not able to delete file from PUtty ...
user avatar
  • 11
1 vote
0 answers
51 views

Is ACL inheritance only at file creation time on zfs?

I'm having trouble understanding how ACLs work on ZFS as compared to how they work on a Windows NTFS system. (In particular, I'm using a TrueNAS 12.) I create a SMB share ("smbtest"), and I ...
user avatar
  • 121
1 vote
1 answer
18 views

AWS VPC: Trying to understand how I got all these network ACL rules

Have had a website running on AWS EC2 instances since 2011. Simple configuration using security groups to treat one instance running nginx as a bastion server allowing HTTP and HTTPS access from ...
user avatar
  • 179
0 votes
1 answer
54 views

How to list all acl permissions set in the system?

with getfacl I can list the ownerships of any file or directory. But I want a list of all the files and directories that have been modified through acl to have more than one owner. I know that getfacl ...
user avatar
0 votes
1 answer
27 views

How to change phantom "inherited" ACE on existing folder?

I unjoined my PC from a Windows domain and converted my profile from domain to local using ForensIT's ProfWiz. Now some apps are giving me an "Access Denied" error on their ProgramData ...
user avatar
  • 131
1 vote
1 answer
69 views

How to set ACL permissions freebsd

unix# setfacl -d -m group:smid_r:r /dat/samba/data/user/smit setfacl: /dat/samba/data/user/smit: acl_calc_mask() failed: Invalid argument setfacl: /dat/samba/data/user/smit: failed to set ACL mask ...
user avatar
  • 149
3 votes
0 answers
138 views

How to set permanent ACLs on hardware (/dev) devices in systemd?

I tried to prevent a user from accessing the webcam via systemd ACLs, but whatever I set is reset on a new login: For regular files, this works just fine, with any access by userx to random_file ...
user avatar
0 votes
1 answer
810 views

How to limit the access of a local windows user to only a specific folder?

I've set up an OpenSSH SFTP connection with the help of documentation and WinSCP and want a colleague to be able to upload files to my computer using this SFTP connection. I've created a new local ...
user avatar
  • 101
0 votes
1 answer
165 views

Using BIND With Different Nameservers for Different Devices

I am running pfSense with BIND installed. On that machine, for a subnet of devices, I want the requests to go to OpenDNS and add my own records that would take precedence over OpenDNS. For the rest of ...
user avatar
0 votes
0 answers
2k views

"In valid argument" when removing permissions with Access Control Lists (ACL)?

This website explains giving and removing the ACL. I have given the permission to another user, and now I want to remove it. In the screenshot below, the getfacl is used to show that another user has ...
user avatar
1 vote
1 answer
26 views

How to completely remove a keyboard layout from windows

I have a software that, when run, automatically adds a specific keyboard layout Is there any way to prevent this? some sort of lock on windows' keyboard layout list? or some sort of permission ...
user avatar
0 votes
1 answer
344 views

NFSv4 ACL is not applying despite having matching GIDs on server and client

I have a fileserver with nfs exports on it. On the server, I have a media directory that I ran setfacl -m g:44000:rwx media on. The directory is exported with rw,sync,no_subtree_check. On my client, ...
user avatar
0 votes
1 answer
15k views

How to change file permissions on Windows via powershell / cmd?

I want to achieve the permissions aspect equivalent on Windows side via PowerShell or cmd, however I couldn't find a solution in order to correctly do this. If someone could help me to achieve this in ...
user avatar
1 vote
1 answer
259 views

ACLs on macOS: ACE "deny delete" on macOS with APFS broken? File not writable in GUI

Since the UF_NOUNLINK Unix flag is actively being thwarted by macOS, I was thinking about using a self-made shell script to achieve a similar functionality with an ACL, namely to prevent accidental ...
user avatar
  • 191
1 vote
1 answer
2k views

Windows ACL deny move of folders on a hierarchy level

I have the goal to prevent Users from accidentally move or delete folders on one specific hierarchy level of an Windows Server 2019 Share. Example: Two User Groups: Admin and User |-...
user avatar
  • 111
1 vote
0 answers
1k views

set ACLs on a cifs mounted folder: possible?

In short: I have mounted a CIFS folder from a remote server. I would now like to share this folder with my local samba server, which is part of a domain, using windows ACLs. Is this possible? How ...
user avatar
1 vote
0 answers
78 views

removing users via powershell with multiple domains

I have been trying to clean the permissions on a NAS via powershell for some time but I have hit an annoying problem. presently I use foreach ($entry in $entries) { $acl = (Get-Item $...
user avatar
  • 264
0 votes
0 answers
38 views

Linux ACLs lists

I have a /home/accounting directory and I need to allow some users to share files without having to change permissions or ownership on any file they put in this directory. And then I should restrict ...
user avatar
  • 1
0 votes
0 answers
730 views

Error with a folder security tab in Windows 10

On an external hard drive I have a folder which seems to have a problem. When I use software on it I have some error message, the only program with can open this folder looks like to be the file ...
user avatar
  • 561
0 votes
0 answers
33 views

WSL Ubuntu 18.06 LTS - Deny Read & Execute but not Read?

I'm trying to setup an id_rsa key in WSL Ubuntu 18.06 LTS and I want permissions of 600, so u+r only. And I'm told that the Windows FS ACL's override those of Linux. Of course my .ssh directory is ...
user avatar
  • 19.4k
0 votes
0 answers
222 views

Powershell ACL failing

Errors when running my code below to add Modify access to a folder. I've seen that a common solution is ensuring the AD user exists. I have double check all users I use exists, but continue to get the ...
user avatar
5 votes
1 answer
16k views

Remove ACLs in Linux permissions

I have files that have a plus sign next to the permissions -rwxrwx---+ on a Linux samba server. I found the setfacl command to adjust the acl settings, I would like to remove the ACL completely, ...
user avatar
0 votes
0 answers
40 views

Bulk change of ACL folder owner

We have several thousand folders and sub-folders in quite a complex folder structure which we are backing up. Several hundred of these sub-folders have been flagged during the backup process as ...
user avatar
  • 378
0 votes
1 answer
260 views

ACLs for a BIND Linux DNS server?

I am working on a BIND DNS server for DNS forwarding. I noticed that you can create an ACL to have trusted clients on the server. Can I configure the BIND server without an ACL, or is it necessary to ...
user avatar
1 vote
1 answer
1k views

How to configure amazon S3 bucket for read-only access to host a static website?

I have a very small (static) website hosted on Amazon S3. Yesterday I received the following message, that had this subject line: Notification of Amazon S3 buckets configured for public access And ...
user avatar
  • 501
0 votes
0 answers
119 views

Enable Write Acess to Removable devices while restricting Read Access [Registry/GPO]

I'm trying to achieve this point: Disable Read Access to Removable Devices from Registry / GPO Enable Write Access to Removable Devices from Registry / GPO What I've tried so far: From gpedit.msc ...
user avatar
  • 320
1 vote
1 answer
55 views

Router Access Control List to prevent users from using alternate DNS

Thank you to anyone that takes the time to read this, I have an ac750 archer c2 router and I am using OpenDNS. I have set the DNS for the WAN to OpenDNS's servers and I'm trying to follow their ...
user avatar

1
2 3 4 5 6