[SOLVED] I Don't understan ACLs

brownwrap · 03-17-2014, 03:32 PM

I have a filesystem that is XFS. I understand XFS has ACLs built in. I remotely mounted that same filesystem through NFS and enabled acl in fstab. Everything was going along fine, until the user 'uliana' could not access files that they owned:

Code:

getfacl scans-bad/
# file: scans-bad
# owner: uliana
# group: uliana
# flags: -s-
user::rw-
user:uliana:rw-
group::rw-
group:uliana:rw-
mask::rw-
other::r--
default:user::rw-
default:group::rw-
default:other::rw-

I used:

Code:

setfacl -m user:uliana:6 scans
setfacl -m group:uliana:6 scans

Yet the user still can't access the directory or the files in it. I can as root.

estabroo · 03-17-2014, 04:01 PM

To enter the directory you need to add execute permissions on the directory.

http://www.thegeekstuff.com/2010/04/...y-permissions/

brownwrap · 03-17-2014, 04:24 PM

In this directory is a bunch of Postscript files. There isn't and executable in the directory, Why did execute work?

estabroo · 03-18-2014, 09:19 AM

For a directory the execute bit isn't about being able to run something, it's about being able to do stuff in that directory.
So if you wanted to access a file's content in a directory all you'd need is execute permission and of course proper permissions on the file itself (and the knowledge that the file existed since without read you wouldn't be able to check).