Issue with ACLs

shadowers · 05-11-2011, 04:45 PM

I have several areas on my server where the default Linux/Unix permission will simply not do the job. I am not implementing ACLs on my server and I am having a few issues.

Here is an issue I am having. On the root of the filesystem I have a folder called "git" and within git is "repos." The owner of these folders is root and the group is root. The permissions are 0770. I then implemented an ACL with following command "setfacl -dR -m g:sambausers:rw git/." When I use getfacl on the folders this is the output:

Code:

larry@Jaguar:/$ getfacl git
# file: git
# owner: root
# group: sambausers
user::rwx
group::rwx
other::---
default:user::rwx
default:group::rwx
default:group:sambausers:rwx
default:mask::rwx
default:other::---

Now I use su and go into the account "larry" from root.

Within the git folder I have permissions on the account larry as I should(larry is apart of the sambausers group), but when I try to cd into repos, it says permission is denied.

What am I doing incorrectly?

SL00b · 05-11-2011, 04:51 PM

You need execute permission on directories in order to cd to them. According to your setfacl command, you only gave sambausers read and write.

chrism01 · 05-11-2011, 09:02 PM

Quote:

default:group:sambausers:rwx

x perm is there ... I guess repos is another dir; check the perms/acl?

shadowers · 05-11-2011, 11:08 PM

I ran getfacl on the repos dir. here is the output.

Code:

larry@Jaguar:/git$ getfacl repos/
# file: repos/
# owner: root
# group: root
user::rwx
group::rwx
other::---
default:user::rwx
default:group::r-x
default:group:sambausers:rwx
default:mask::rwx
default:other::---