setfacl

vande012 · 09-29-2017, 11:47 AM

can setfacl be accomplished by using chown and chomod?

I ask because I am using puppet to set file permissions and setfacl is not a native puppet command

TB0ne · 09-29-2017, 12:35 PM

Quote:

Originally Posted by vande012

can setfacl be accomplished by using chown and chomod?

I ask because I am using puppet to set file permissions and setfacl is not a native puppet command

No. While you can control *SOME* aspects of file permissions with chown/chmod that do some of the same things as acl's do, acl's give you much finer control over things.

The "But.." here, is how you're using it. In conjunction with Samba/NFS where ACL's have different meanings, no. For 'generic' permissions, it will depend on what your goals are. What are you trying to accomplish?

vande012 · 09-29-2017, 12:44 PM

I'm setting splunk log directory permissions

I can set their chmod 755 and chown splunk for one level in their splunk log directories but they do a setfacl

E.G.
setfacl -R -d -m g:splunk:rx /var/log/

There is no puppet module to accomplish their setfacl , the only way to accomplish this is with a puppet exec resource, i believe

jefro · 09-29-2017, 03:24 PM

To be exact, no you can't use ch* to perform setacl as the commands are too old to perform all the newer features.

chmod - change file mode bits

chown - change file owner and group

setfacl - set file access control lists

Some help here. https://unix.stackexchange.com/quest...se/92414#92414
__________________