LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 01-25-2008, 03:56 AM   #1
extendedping
Member
 
Registered: Feb 2004
Posts: 210

Rep: Reputation: 30
question setting acl's.


hmmm. here is what I did. I copied the fstab to /home/acluser1 a user/dir that I am using to understand acl's. I then run ls -l and it shows wr-r--r-- on that file and owned by root. I run getfacl on the file and see the same permission. ok all good. I then created another user called acluser2. I then went back to the copied fstab file in the /homeacluser1 dir and ran the following command:

setfacl -m u:acluser2:rwx: /home/acluser1/fstab.
then I run both a ls -l on the file as well as a getfacl on it. strangely the permission in both show wr-wrx-r (I am showing the ls result but it was the same permission set in the getfacl result). I can see from ls -l a + at the end of the line which I assume means there is an acl on the file...but what I don't understand...why does granting total access to one user (acluser2 rwx) on this file now make the file show total access (wrx) in the group listing (the middle 3) in the ls -l command???. in the getfacl result it also shows group with rwx permission. BUT I SPECIFIED THE USER ACLUSER2 in the above command (setfacl -m u:acluser2:rwx: /home/acluser1/fstab) so why is the group now set to rwx where it was just r-- previously??? I am totally confused here

I can't really find much on the internet explaining this...help me out if you can and thank you in advance...
 
Old 01-25-2008, 04:59 AM   #2
jschiwal
LQ Guru
 
Registered: Aug 2001
Location: Fargo, ND
Distribution: SuSE AMD64
Posts: 15,733

Rep: Reputation: 682Reputation: 682Reputation: 682Reputation: 682Reputation: 682Reputation: 682
I repeated your experiment and noticed the same thing. However, a member of the group was not able to read the file. So the effect of the acl permissions seem valid. The ls -l listing seems invalid. The info manual states that a "+" sign is added at the end. I did see that. I can't answer about the group permissions displayed.

I used "setfacl -m g:tuser:r fstab" to give the group user read access. This worked as well. Write access was denied.
Code:
tuser@hpamd64:/home/jschiwal> getfacl fstab
# file: fstab
# owner: jschiwal
# group: tuser
user::rw-
user:testuser:rw-
group::---
group:tuser:r--
mask::rw-
other::---

tuser@hpamd64:/home/jschiwal> ls -l fstab
-rw-rw----+ 1 jschiwal tuser 1621 Jan 25 04:54 fstab
tuser@hpamd64:/home/jschiwal>

Last edited by jschiwal; 01-25-2008 at 05:00 AM.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
ACL's being ignored when using NFS uk_dave Linux - General 3 07-01-2007 01:32 PM
acl's in subversion?? prozac Linux - Software 0 12-22-2005 01:36 AM
Linux ACL's? gsmonk Linux - General 4 09-06-2003 02:35 PM
tool for setting acl's in gnome sfonvill Linux - Security 1 09-03-2003 04:41 AM
squid ACL's seanfitz Linux - Networking 0 05-13-2003 07:28 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 06:14 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration