Access Control Lists

aaf · 01-07-2007, 04:19 PM

I'm trying to use access control lists to grant access to a directory to specific users without needing complex group memberships.

I checked I had a suitable kernel, installed the software and modified my fstab file, and it looks like they should be working... this is the info mount returns about the drive...

Code:

/dev/hda1 on / type ext3 (rw,acl,errors=remount-ro)

I ran the following to set the permissions (and defaults), but the user wibble can't access.

Code:

setfacl -R -d -m user:wibble:rx photos 
setfacl -R -m user:wibble:rx photos

Any thoughts anybody?

anomie · 01-08-2007, 09:52 AM

Did you check 'photos' with getfacl after applying the change? The syntax you're using looks correct.

aaf · 01-08-2007, 11:57 AM

Yeah, I did...

Code:

# file: photos
# owner: me
# group: photos
user::rwx
user:wibble:r-x                 #effective:---
group::r-x                      #effective:---
mask::---
other::---
default:user::rwx
default:user:wibble:r-x
default:group::r-x
default:mask::r-x
default:other::r-x

In practice however, the wibble user cannot access that directory. This leads me to think that acls are not somehow active.