LinuxQuestions.org
Review your favorite Linux distribution.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 05-01-2002, 11:17 AM   #1
Touchstone
Member
 
Registered: Nov 2001
Location: Ontario, Canada
Distribution: RH 7.2
Posts: 31

Rep: Reputation: 15
ACL and EA in X11


I am trying to find a utility that will allow me to manipulate my ACLs for directories, other than Konsole. while running KDE. Most of the admins on my LAN don't know much about Linux file level security. I want to make it so the don't call me on my day off.
 
Old 05-01-2002, 01:41 PM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
I may be a wee bit dense rite now, but "Konsole" is just the KDE version of Xterm. So my question is, *what* do you handle your ACL's with?..
And what ACL implementation are you talking about? Trustee's, LOMAC, RSBAC, LIDS or GRSecurity?..
 
Old 05-01-2002, 01:47 PM   #3
Touchstone
Member
 
Registered: Nov 2001
Location: Ontario, Canada
Distribution: RH 7.2
Posts: 31

Original Poster
Rep: Reputation: 15
Honestly I could not tell you which EA\ACL I am using. It was akernel patch I got from http://acl.bestbits.at
Right now I am just modifying the ACL for each directory from the console using "setfacl" and viewing with "getfacl" However I can't expect everyong to use this method.
 
Old 05-01-2002, 04:35 PM   #4
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
Uh. Ok. Never tried that one.
Haven't seen a GUI for it either, but I guess a simple GUI using scripting and Xdialog could be made for it in no time. I mean, is there a limit to how many users and groups can have acl rights on a file? Also I'm kinda wondering where it stores these ACL's (what level?).
 
Old 05-01-2002, 07:33 PM   #5
Touchstone
Member
 
Registered: Nov 2001
Location: Ontario, Canada
Distribution: RH 7.2
Posts: 31

Original Poster
Rep: Reputation: 15
I am not sure where it stores the ACL iether. I really don't know too much about the patch other than it allows me to really be very granular about the amount of access I give to users.

I can let marketing read the files, while Development can write and read, and document Control department have full access, and everyone else is restricted. ACL it's a wonderfull thing. no more world readable directores, no more complex grouping structures. The file level control of NT with the stability of Linux.

The next step in my master plan hinges on OpenLDAP, "pam_ldap", and Microsoft's "Services for Unix" and I have 100% Lin\Win integration. If the Samba team finishes WinBind soon then it will speed me up alot, but I can get around it. If I can get a GUI ACL editor then I have a stable platform with easily administered file level security, that authenticates Linux and Windows workstation from a single LDAP database.


Last edited by Touchstone; 05-01-2002 at 07:37 PM.
 
Old 05-02-2002, 03:34 PM   #6
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
If you're good at shellscripting I know this ain't impossible, and maybe there's some ppl at /Programming who'd like to help out.
On second thought you're at a commerical outfit, maybe hire a programmer? :-]
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Core 4 - X11-devel complains about X11-libs which are installed Ephracis Fedora 3 09-05-2005 09:32 AM
xorg-x11-libs required by xorg-x11-devel darknails Fedora 1 01-13-2005 02:34 PM
ACL Help theDrix Linux - General 0 07-22-2004 08:25 AM
Roaming X11/Xfree86, X11 proxy zapp Linux - Software 1 09-12-2003 08:06 AM
Solaris ACL mindcry Solaris / OpenSolaris 1 01-26-2003 07:35 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 07:48 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration