Skip to main content

Questions tagged [acl]

The ACL is a security and access component of Operating Systems. It contains a set of entries that determine who and what has access to a specified physical or logical system object.

Filter by
Sorted by
Tagged with
0 votes
0 answers
21 views

What's the meaning of the individual characters in the ACE "user:fakeusername:allow:rwxpdDaARWcCo:----"?

I have output like the following and would like to understand the meaning of the individual ACE characters after the basic permissions "rwx". Sadly, I couldn't find any docs about those. It ...
Thorsten Schöning's user avatar
0 votes
0 answers
16 views

Can I grant access to attributes of OpenLDAP's password policy?

Being asked to list users that have an expired or soon-to-expire password in OpenLDAP 2.4 (SLES12 SP5), I realized that only the admin user had access to essential attributes like pwdLastChange. So I ...
U. Windl's user avatar
  • 705
2 votes
0 answers
23 views

Some keys created under HKEY_CURRENT_USER do not receive ACL for the current user

I've banged my head against this case for the past few weeks, but couldn't find any explanation - my application creates keys under HKCU\Software\[app_name]\[inner_app_key], but I've received a number ...
Loqaritm's user avatar
1 vote
0 answers
53 views

Windows 10/11 NTFS permissions for Azure AD Group within Windows Folders

This post show how to handle permissions to users: Windows 10 NTFS permissions for Azure AD account How can I use the same logic to add groups from Azure instead of users into Windows Explorer folders?...
Gustavo H.'s user avatar
0 votes
0 answers
76 views

Is it possible to temporarily disable or block a samba share without server restart?

I have Linux server hosting separate samba share for users on some windows clients (each user would have a linux client also accessing their share) (users have authenticator app on separate devices). ...
ift-436t's user avatar
0 votes
1 answer
36 views

Cannot load database overlay due to permissions in OpenLDAP

I am having a hard time to configure OpenLDAP with MemberOf overlay. I have compiled openldap 2.5.16 from scratch, with --with-memberof option. Somehow it works: sys# sbin/slapcat -F config/slapd.d -n ...
Smok's user avatar
  • 3
0 votes
0 answers
95 views

Cannot access PC from Internet via IPv6

I am trying to make my computer accessible from the internet for SSH via IPv6. Unfortunately, nothing I tried so far has worked: The PC is running Windows 11, 23H2 I can use the IPv6 address (from ...
Lukas Lang's user avatar
0 votes
0 answers
40 views

setfacl does not work on files in tmp

ls -ld /tmp drwxrwxrwt 17 root root 440 Feb 3 11:18 /tmp user1@debian:/tmp$ touch acltest0 user1@debian:/tmp$ ls -l acltest0 -rw-rw-r-- 1 user1 user1 0 Feb 3 11:22 acltest0 user1@debian:/tmp$ ...
achille's user avatar
  • 137
3 votes
1 answer
684 views

What is the meaning of the manage-gids parameter in /etc/nfs.conf?

I have run into an issue (on a system which I am not root) where there is a directory using an acl to manage access, I should be allowed access (and I am allowed access if I do a newgrp to one of the ...
lagnut's user avatar
  • 33
0 votes
0 answers
66 views

Permissions on specific subfolders with Set-Acl

I have to create a set of folders based on an address list and then configure the permissions in active directory. Creating the folders and subfolders works for me, I adapted a few lines I found ...
Marin's user avatar
  • 1
2 votes
1 answer
153 views

Why does my ACL need to be configured this way to grant access that I want?

I have a secondary network from my ER605 router, this is used that the connected device, a raspberry pi, can be isolated. I use it to quarantine and scan incoming files from dubious sources (such as ...
Sidney's user avatar
  • 1,307
1 vote
1 answer
168 views

Windows Process-Wide Security for Java via registry keys

My goal is to configure COM/DCOM security for my Java OPC DA client (not server). The main problem is that every time the client tries to get updates from a OPC DA server in asynchronous mode, it ...
devaskim's user avatar
  • 111
0 votes
1 answer
121 views

Regedit key is not found

Powershell: $paths = @( "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\PnpLockdownFiles\%SystemRoot%/System32/drivers/3ware.sys" ) foreach($path in $paths) { ...
Bugatti's user avatar
1 vote
0 answers
127 views

Program, run as admin, can't write log file to folder with admin-only ACLs

I have a folder set up on all of our computers for random log files, configs, etc., deployed with the following PowerShell: #Create directory if it does not already exist $path = "C:\Wagner" ...
Emilio Garcia's user avatar
0 votes
1 answer
786 views

setfacl: How to give user permission to a dir for existing and future files?

OS: debian:bullseye (docker image). What I am trying to do: I have a websockets server that creates a unix socket and listens on it. I am trying to set up nginx in front of this. I am trying to set up ...
agnivesh's user avatar
0 votes
1 answer
425 views

How do I interpret the results returned by getcifsacl?

I'm reviewing permissions on a local directory provided by a remote Samba server. The server itself is Linux (Ubuntu 16.04). The local machine is Centos 7. When I run getcifsacl I get the data, for ...
user658182's user avatar
0 votes
2 answers
416 views

What are the access rules of "Standard access rights" and "Object-specific access rights" in Access Mask

I used NtObjectManager to get permissions of the named pipe \\.\pipe\InitShutdown: PS C:\WINDOWS\system32> $a = Get-NtFile("\Device\NamedPipe\InitShutdown") PS C:\WINDOWS\system32> $a....
E235's user avatar
  • 231
0 votes
0 answers
70 views

How can I delete this file with odd permissions?

I accidentally created a file without delete permission. "Everyone" has the following permissions: and "OWNER RIGHTS" has no permissions at all. In string form, the security ...
Stack Exchange Supports Israel's user avatar
2 votes
2 answers
2k views

Is there a Windows equivalent to chmod rx (no w access)

I've been trying to use the Windows 10 icacls utility to do this. I did some searching here, and I found this, but it doesn't my specific question. I tried adding a comment to this question, but I don'...
Paul's user avatar
  • 131
2 votes
0 answers
38 views

When managing permissions via network on a remote PC, can't list or add users on the managed PC (no AD): What I am doing wrong?

This is not a duplicate question. Please read thoroughly and completely before closing it. Similar questions or their solutions either are related to AD or did not work. Having said this: I have two ...
Binarus's user avatar
  • 1,835
0 votes
1 answer
763 views

MariaDB move database to user home

I'm trying to move some databases to the home directory of a user but facing issues on a Ubuntu 20.04 LTS Here's what I've done: Created a new database for this setup. Named it "test" ...
chrimbo's user avatar
  • 21
1 vote
1 answer
717 views

ACL wget permission denied

ls -la: total 0 drwxrwxr-x+ 2 root root 4096 Jul 11 21:40 ./ drwxrwxr-x 2 root root 4096 Jul 11 21:40 ../ the permissions on . have a plus so ACL is active... getfacl .: # file: . # owner: root # ...
Simon's user avatar
  • 23
1 vote
1 answer
155 views

Squid running on docker not enforcing time acl in configuration

I have a squid running in docker, which is not enforcing the time ACLs that are defined in the configuration. I'me using https://hub.docker.com/r/ubuntu/squid running on arm This is my configuration ...
BANJOSA's user avatar
  • 193
0 votes
0 answers
233 views

Repairing ACL on Windows drive

Few days before I installed Ubuntu MATE edition. System was very unstable and crashing so I deleted it, but before that something weird happened. Im tried to access one pdf file located on Windows 10 ...
Greg_em's user avatar
  • 21
1 vote
0 answers
229 views

Make a file unreadable for owner on Windows

I am working with the automated test suite of a software project. I have an automated test case that should verify that the code works correctly when a specific file is found, but the program does not ...
magicus's user avatar
  • 11
0 votes
1 answer
262 views

Linux getfacl and setfacl compatibility

Trying to use getfacl and setfacl commands to control ACLs to a specific file to enforce security. Wondering if these two commands are standard and if will they be available in most Linux ...
Prabhu's user avatar
  • 101
1 vote
1 answer
343 views

How do I restrict permission to change the primaryGroupID attribute in Active Directory?

I am changing the primaryGroupID attribute in Active Directory on the user. I do it through PowerShell. I'm doing great! Set-ADUser -Server domain.local -Identity KUL -Replace @{PrimaryGroupID=123456} ...
KUL's user avatar
  • 111
0 votes
1 answer
3k views

How do I apply the acl permissions for ALL files (those in sub-directories too) without changing folder permissions?

Need to give new user acl permissions on linux server without changing existing chmod permissions. New user doesn't belong to any group and doesn't own files. User needs to be able to write and read ...
yaris's user avatar
  • 1
0 votes
0 answers
2k views

How can I allow all users to read/write/modify/delete files on Samba share? (re: home network)

I'm having difficulty understanding file/directory permissions especially with Samba. On my server (Debian 11, Samba 4.13.13), I've created several different users and added them to samba (ie. ...
SofaKng's user avatar
  • 1,235
0 votes
0 answers
610 views

ACL for web browsing only

I have a TP-Link ER605 connected to my Comcast Business router. The firewall on the Comcast router is set up and working fine. Unfortunately, the TP-Link's ACL is either missing something or ...
Ryan Fitzgerald's user avatar
0 votes
1 answer
321 views

Windows maintain explicit ACL of sub folder when copying

We use a master project folder when creating new projects, one of the sub-folders has explicit access restrictions that are different to the containing folder. That ACL is lost when you copy and paste ...
th3joker's user avatar
1 vote
1 answer
864 views

How to remove a folder with «everyone deny delete»?

I choose to sync my documents with iCloud in OS X. Because it created unattended and unepected changes, I preferred not to sync with iCloud. A remnant folder was left at the first level of MyUser and ...
rlesperance's user avatar
1 vote
0 answers
606 views

ZFS NFSv4 ACLs not displaying on the client side

I'm running ZFS [2.0.3] on Debian 10 with NFSv4 shares, setting xattr: on and acltype: posixacl, with my export using zfs set sharenfs being: rw=@@hosts,async,no_subtree_check,no_root_squash I can ...
user1398's user avatar
1 vote
1 answer
2k views

How do I recursively add ACL settings identical to the owners' for another user

I have a directory tree (in a Linux system) at "/opt/cudasamples" owned by root. I wish to be able to change contents (files and subdirectories) of this directory as a normal user, i.e. ...
Thomas Arildsen's user avatar
1 vote
0 answers
302 views

xfs acl not preserved after reboot

I'm adding a new xfs partition (/home) to a centos 7 server that has ext3 filesystem. Old /home is ext3. After mounting the new partition, I copied the info in the old home to the new home with rsync:...
Sven Knowles's user avatar
0 votes
1 answer
4k views

Deny Permission to Folders and Files

I need to Deny an group to C:\Windows\Installer folder/files I try to use following but it only applies to folder but not all of the files, it is applying to some files $path = "C:\Windows\...
maj's user avatar
  • 85
1 vote
0 answers
301 views

Why is ACL not working as intended in Bash?

I have a directory named music. I have set setgid and sticky bit on music directory. soubhik@dev:~$ getfacl music/ # file: music/ # owner: soubhik # group: media # flags: -st user::rwx group::rwx ...
sushruta19's user avatar
0 votes
1 answer
383 views

How to remove ACL functionality altogether in Windows 10 / NTFS?

Recently saw some interesting benchmarks of Early Windows 11 WSL2 Performance vs Native Ubuntu Linux vs Windows 10. Some comments about this seem to indicate a belief that Windows' ACL implementation ...
ylluminate's user avatar
  • 1,231
0 votes
1 answer
2k views

'Everyone' permissions on windows folders

i've noticed the following folders have everyone permissions: c:/Windows/System32/DriverStore c:/Windows/System32/spool Is this default Windows behavior or some kind of ugly fix? If the mentioned ...
RockYoClock's user avatar
2 votes
0 answers
297 views

Reason and functioning of split NTFS permissions

On a fresh formatted non-system NTFS volume of type hard disk media (unpartitionable USB thumb drive is different) under Windows 10, the NTFS ACEs are as follows (Get-Acl): FileSystemRights : -...
Hermjard's user avatar
1 vote
1 answer
295 views

How to exactly “protect” a folder from Windows Media Player (preventing it from messing up album covers)

I struggle with the following two instructions mentioned on on this blog post for Windows Media Player 12 shows wrong cover art when playing Then (separately, else you won't get the Security tab) ...
Cyman's user avatar
  • 415
0 votes
0 answers
10 views

How to "protect" a folder from Windows Media Player (preventing it from messing up album covers) [duplicate]

In addition to Windows Media Player 12 shows wrong cover art when playing I would like to try option 1 from the accepted answer, but I don't know how to protect a folder, i.e. deny rights with ACL. ...
Cyman's user avatar
  • 415
0 votes
1 answer
1k views

Registry key in HKLM "invisible" to SYSTEM?

I'm trying to allow all users to execute a scheduled task. The script I found/adjusted works fine when run as an admin, but fails when run as SYSTEM (i.e. as a startup or SCCM script). Walking ...
Teknowledgist's user avatar
0 votes
1 answer
1k views

Need to block just one MAC address on my D-Link DIR-612 but can't find the setting

My parents have a wireless router (D-Link DIR-612) that is provided for by a local telecommunications company. Recently I've detected a phone's MAC address that doesn't belong to any of our devices ...
AngryWeeb's user avatar
1 vote
0 answers
181 views

Revoke delete permission for particular user in linux

I have to revoke delete permission for particular user in Linux. I have tried ACL it worked but user is able to delete file winscp. My requirement is that user is not able to delete file from PUtty ...
Neha's user avatar
  • 11
1 vote
0 answers
289 views

Is ACL inheritance only at file creation time on zfs?

I'm having trouble understanding how ACLs work on ZFS as compared to how they work on a Windows NTFS system. (In particular, I'm using a TrueNAS 12.) I create a SMB share ("smbtest"), and I ...
Daniel's user avatar
  • 123
1 vote
1 answer
124 views

AWS VPC: Trying to understand how I got all these network ACL rules

Have had a website running on AWS EC2 instances since 2011. Simple configuration using security groups to treat one instance running nginx as a bastion server allowing HTTP and HTTPS access from ...
sootsnoot's user avatar
  • 199
1 vote
1 answer
3k views

How to list all acl permissions set in the system?

with getfacl I can list the ownerships of any file or directory. But I want a list of all the files and directories that have been modified through acl to have more than one owner. I know that getfacl ...
honestSalami's user avatar
0 votes
1 answer
175 views

How to change phantom "inherited" ACE on existing folder?

I unjoined my PC from a Windows domain and converted my profile from domain to local using ForensIT's ProfWiz. Now some apps are giving me an "Access Denied" error on their ProgramData ...
zencraft's user avatar
  • 148
1 vote
1 answer
641 views

How to set ACL permissions freebsd

unix# setfacl -d -m group:smid_r:r /dat/samba/data/user/smit setfacl: /dat/samba/data/user/smit: acl_calc_mask() failed: Invalid argument setfacl: /dat/samba/data/user/smit: failed to set ACL mask ...
Adam's user avatar
  • 149

1
2 3 4 5 6