Questions tagged [acl]
The ACL is a security and access component of Operating Systems. It contains a set of entries that determine who and what has access to a specified physical or logical system object.
278
questions
1
vote
1
answer
46
views
Windows Process-Wide Security for Java via registry keys
My goal is to configure COM/DCOM security for my Java OPC DA client (not server).
The main problem is that every time the client tries to get updates from a OPC DA server in asynchronous mode, it ...
- 111
0
votes
1
answer
54
views
Regedit key is not found
Powershell:
$paths = @( "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\PnpLockdownFiles\%SystemRoot%/System32/drivers/3ware.sys"
)
foreach($path in $paths)
{
...
- 3
1
vote
0
answers
42
views
Program, run as admin, can't write log file to folder with admin-only ACLs
I have a folder set up on all of our computers for random log files, configs, etc., deployed with the following PowerShell:
#Create directory if it does not already exist
$path = "C:\Wagner"
...
- 233
0
votes
0
answers
102
views
Do default (-d flag in setfacl) ACL permissions persist after reboot?
Apologies if this has already been asked, but I've not found the answer to this particular question thus far.
I'm running two different commands: the first command to Recursively set a default ACL for ...
0
votes
1
answer
133
views
setfacl: How to give user permission to a dir for existing and future files?
OS: debian:bullseye (docker image).
What I am trying to do:
I have a websockets server that creates a unix socket and listens on it. I am trying to set up nginx in front of this. I am trying to set up ...
- 1
0
votes
0
answers
166
views
Allow access to only one group with NFS4 ACL on TrueNAS Scale
I recently switch from TrueNAS Core to Scale, and I'm having issues when it comes to ACL configuration on my datasets. I have a few shares that I'd like to make accessible by a specific group only. I ...
- 1
0
votes
1
answer
181
views
How do I interpret the results returned by getcifsacl?
I'm reviewing permissions on a local directory provided by a remote Samba server. The server itself is Linux (Ubuntu 16.04). The local machine is Centos 7. When I run getcifsacl I get the data, for ...
- 243
0
votes
2
answers
107
views
What are the access rules of "Standard access rights" and "Object-specific access rights" in Access Mask
I used NtObjectManager to get permissions of the named pipe \\.\pipe\InitShutdown:
PS C:\WINDOWS\system32> $a = Get-NtFile("\Device\NamedPipe\InitShutdown")
PS C:\WINDOWS\system32> $a....
- 223
0
votes
0
answers
41
views
How can I delete this file with odd permissions?
I accidentally created a file without delete permission.
"Everyone" has the following permissions: and "OWNER RIGHTS" has no permissions at all.
In string form, the security ...
- 344
2
votes
2
answers
529
views
Is there a Windows equivalent to chmod rx (no w access)
I've been trying to use the Windows 10 icacls utility to do this. I did some searching here, and I found this, but it doesn't my specific question. I tried adding a comment to this question, but I don'...
- 131
2
votes
0
answers
23
views
When managing permissions via network on a remote PC, can't list or add users on the managed PC (no AD): What I am doing wrong?
This is not a duplicate question. Please read thoroughly and completely before closing it. Similar questions or their solutions either are related to AD or did not work. Having said this:
I have two ...
- 1,657
0
votes
1
answer
255
views
MariaDB move database to user home
I'm trying to move some databases to the home directory of a user but facing issues on a Ubuntu 20.04 LTS
Here's what I've done:
Created a new database for this setup. Named it "test"
...
- 21
1
vote
1
answer
554
views
ACL wget permission denied
ls -la:
total 0
drwxrwxr-x+ 2 root root 4096 Jul 11 21:40 ./
drwxrwxr-x 2 root root 4096 Jul 11 21:40 ../
the permissions on . have a plus so ACL is active...
getfacl .:
# file: .
# owner: root
# ...
- 21
1
vote
1
answer
90
views
Squid running on docker not enforcing time acl in configuration
I have a squid running in docker, which is not enforcing the time ACLs that are defined in the configuration. I'me using https://hub.docker.com/r/ubuntu/squid running on arm
This is my configuration ...
- 183
0
votes
0
answers
89
views
Repairing ACL on Windows drive
Few days before I installed Ubuntu MATE edition. System was very unstable and crashing so I deleted it, but before that something weird happened.
Im tried to access one pdf file located on Windows 10 ...
- 21
1
vote
0
answers
122
views
Make a file unreadable for owner on Windows
I am working with the automated test suite of a software project. I have an automated test case that should verify that the code works correctly when a specific file is found, but the program does not ...
- 11
0
votes
1
answer
129
views
Linux getfacl and setfacl compatibility
Trying to use getfacl and setfacl commands to control ACLs to a specific file to enforce security. Wondering if these two commands are standard and if will they be available in most Linux ...
- 101
1
vote
1
answer
115
views
How do I restrict permission to change the primaryGroupID attribute in Active Directory?
I am changing the primaryGroupID attribute in Active Directory on the user.
I do it through PowerShell. I'm doing great!
Set-ADUser -Server domain.local -Identity KUL -Replace @{PrimaryGroupID=123456}
...
- 111
0
votes
1
answer
1k
views
How do I apply the acl permissions for ALL files (those in sub-directories too) without changing folder permissions?
Need to give new user acl permissions on linux server without changing existing chmod permissions. New user doesn't belong to any group and doesn't own files. User needs to be able to write and read ...
- 1
0
votes
0
answers
942
views
How can I allow all users to read/write/modify/delete files on Samba share? (re: home network)
I'm having difficulty understanding file/directory permissions especially with Samba.
On my server (Debian 11, Samba 4.13.13), I've created several different users and added them to samba (ie. ...
- 1,205
0
votes
0
answers
317
views
ACL for web browsing only
I have a TP-Link ER605 connected to my Comcast Business router. The firewall on the Comcast router is set up and working fine. Unfortunately, the TP-Link's ACL is either missing something or ...
- 101
0
votes
1
answer
151
views
Windows maintain explicit ACL of sub folder when copying
We use a master project folder when creating new projects, one of the sub-folders has explicit access restrictions that are different to the containing folder.
That ACL is lost when you copy and paste ...
- 1
1
vote
0
answers
412
views
How to remove a folder with «everyone deny delete»?
I choose to sync my documents with iCloud in OS X. Because it created unattended and unepected changes, I preferred not to sync with iCloud. A remnant folder was left at the first level of MyUser and ...
- 11
1
vote
0
answers
369
views
ZFS NFSv4 ACLs not displaying on the client side
I'm running ZFS [2.0.3] on Debian 10 with NFSv4 shares, setting xattr: on and acltype: posixacl, with my export using zfs set sharenfs being:
rw=@@hosts,async,no_subtree_check,no_root_squash
I can ...
- 11
1
vote
1
answer
991
views
How do I recursively add ACL settings identical to the owners' for another user
I have a directory tree (in a Linux system) at "/opt/cudasamples" owned by root.
I wish to be able to change contents (files and subdirectories) of this directory as a normal user, i.e. ...
- 909
1
vote
0
answers
205
views
xfs acl not preserved after reboot
I'm adding a new xfs partition (/home) to a centos 7 server that has ext3 filesystem.
Old /home is ext3.
After mounting the new partition, I copied the info in the old home to the new home with rsync:...
- 11
0
votes
1
answer
2k
views
Deny Permission to Folders and Files
I need to Deny an group to C:\Windows\Installer folder/files
I try to use following but it only applies to folder but not all of the files, it is applying to some files
$path = "C:\Windows\...
- 85
1
vote
0
answers
151
views
Why is ACL not working as intended in Bash?
I have a directory named music. I have set setgid and sticky bit on music directory.
soubhik@dev:~$ getfacl music/
# file: music/
# owner: soubhik
# group: media
# flags: -st
user::rwx
group::rwx
...
- 111
0
votes
1
answer
235
views
How to remove ACL functionality altogether in Windows 10 / NTFS?
Recently saw some interesting benchmarks of Early Windows 11 WSL2 Performance vs Native Ubuntu Linux vs Windows 10. Some comments about this seem to indicate a belief that Windows' ACL implementation ...
- 1,089
0
votes
1
answer
1k
views
'Everyone' permissions on windows folders
i've noticed the following folders have everyone permissions:
c:/Windows/System32/DriverStore
c:/Windows/System32/spool
Is this default Windows behavior or some kind of ugly fix?
If the mentioned ...
- 33
1
vote
0
answers
185
views
Reason and functioning of split NTFS permissions
On a fresh formatted non-system NTFS volume of type hard disk media (unpartitionable USB thumb drive is different) under Windows 10, the NTFS ACEs are as follows (Get-Acl):
FileSystemRights : -...
- 11
1
vote
1
answer
214
views
How to exactly “protect” a folder from Windows Media Player (preventing it from messing up album covers)
I struggle with the following two instructions mentioned on on this blog post for Windows Media Player 12 shows wrong cover art when playing
Then (separately, else you won't get the Security tab) ...
- 365
0
votes
0
answers
10
views
How to "protect" a folder from Windows Media Player (preventing it from messing up album covers) [duplicate]
In addition to Windows Media Player 12 shows wrong cover art when playing I would like to try option 1 from the accepted answer, but I don't know how to protect a folder, i.e. deny rights with ACL. ...
- 365
0
votes
1
answer
756
views
Registry key in HKLM "invisible" to SYSTEM?
I'm trying to allow all users to execute a scheduled task. The script I found/adjusted works fine when run as an admin, but fails when run as SYSTEM (i.e. as a startup or SCCM script).
Walking ...
- 348
0
votes
1
answer
716
views
Need to block just one MAC address on my D-Link DIR-612 but can't find the setting
My parents have a wireless router (D-Link DIR-612) that is provided for by a local telecommunications company. Recently I've detected a phone's MAC address that doesn't belong to any of our devices ...
1
vote
0
answers
114
views
Revoke delete permission for particular user in linux
I have to revoke delete permission for particular user in Linux. I have tried ACL it worked but user is able to delete file winscp. My requirement is that user is not able to delete file from PUtty ...
- 11
1
vote
0
answers
158
views
Is ACL inheritance only at file creation time on zfs?
I'm having trouble understanding how ACLs work on ZFS as compared to how they work on a Windows NTFS system. (In particular, I'm using a TrueNAS 12.)
I create a SMB share ("smbtest"), and I ...
- 123
1
vote
1
answer
45
views
AWS VPC: Trying to understand how I got all these network ACL rules
Have had a website running on AWS EC2 instances since 2011. Simple configuration using security groups to treat one instance running nginx as a bastion server allowing HTTP and HTTPS access from ...
- 179
0
votes
1
answer
411
views
How to list all acl permissions set in the system?
with getfacl I can list the ownerships of any file or directory. But I want a list of all the files and directories that have been modified through acl to have more than one owner.
I know that getfacl ...
- 133
0
votes
1
answer
85
views
How to change phantom "inherited" ACE on existing folder?
I unjoined my PC from a Windows domain and converted my profile from domain to local using ForensIT's ProfWiz. Now some apps are giving me an "Access Denied" error on their ProgramData ...
- 140
1
vote
1
answer
273
views
How to set ACL permissions freebsd
unix# setfacl -d -m group:smid_r:r /dat/samba/data/user/smit
setfacl: /dat/samba/data/user/smit: acl_calc_mask() failed: Invalid argument
setfacl: /dat/samba/data/user/smit: failed to set ACL mask
...
- 149
3
votes
0
answers
280
views
How to set permanent ACLs on hardware (/dev) devices in systemd?
I tried to prevent a user from accessing the webcam via systemd ACLs, but whatever I set is reset on a new login:
For regular files, this works just fine, with any access by userx to random_file ...
- 143
2
votes
1
answer
2k
views
How to limit the access of a local windows user to only a specific folder?
I've set up an OpenSSH SFTP connection with the help of documentation and WinSCP and want a colleague to be able to upload files to my computer using this SFTP connection.
I've created a new local ...
- 121
0
votes
1
answer
316
views
Using BIND With Different Nameservers for Different Devices
I am running pfSense with BIND installed. On that machine, for a subnet of devices, I want the requests to go to OpenDNS and add my own records that would take precedence over OpenDNS. For the rest of ...
- 121
1
vote
0
answers
4k
views
"In valid argument" when removing permissions with Access Control Lists (ACL)?
This website explains giving and removing the ACL. I have given the permission to another user, and now I want to remove it.
In the screenshot below, the getfacl is used to show that another user has ...
- 351
1
vote
1
answer
40
views
How to completely remove a keyboard layout from windows
I have a software that, when run, automatically adds a specific keyboard layout
Is there any way to prevent this?
some sort of lock on windows' keyboard layout list?
or some sort of permission ...
2
votes
1
answer
675
views
NFSv4 ACL is not applying despite having matching GIDs on server and client
I have a fileserver with nfs exports on it. On the server, I have a media directory that I ran setfacl -m g:44000:rwx media on. The directory is exported with rw,sync,no_subtree_check.
On my client, ...
- 176
4
votes
1
answer
37k
views
How to change file permissions on Windows via powershell / cmd?
I want to achieve the permissions aspect equivalent on Windows side via PowerShell or cmd, however I couldn't find a solution in order to correctly do this. If someone could help me to achieve this in ...
1
vote
1
answer
395
views
ACLs on macOS: ACE "deny delete" on macOS with APFS broken? File not writable in GUI
Since the UF_NOUNLINK Unix flag is actively being thwarted by macOS, I was thinking about using a self-made shell script to achieve a similar functionality with an ACL, namely to prevent accidental ...
- 201
1
vote
1
answer
3k
views
Windows ACL deny move of folders on a hierarchy level
I have the goal to prevent Users from accidentally move or delete folders on one specific hierarchy level of an Windows Server 2019 Share.
Example:
Two User Groups: Admin and User
|-...
- 111