[SOLVED] setfacl -s from ibm tutorial fails

andrew.comly · 07-20-2017, 07:18 AM

setfacl -s doesn't work

I am reading the IBM tutorial on setfacl on the IBM Knowledge Center.

I would like to use the "-s" option for the command setfacl. The bash version on my Trisquel 7.0 OS is:

Code:

$ bash --version
GNU bash, version 4.3.11(1)-release (x86_64-pc-linux-gnu)
Copyright (C) 2013 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>

In the manual file for setfacl on my system, there is no "-q, -s, -S" options like on the ibm Knowledge Center webpage above.

I start out with files w, y and z:

Code:

# file: w
# owner: a
# group: a
user::rw-
group::rw-
other::r--

# file: y
# owner: a
# group: a
user::rw-
group::rw-
other::r--

# file: z
# owner: a
# group: a
user::rw-
user:a:rwx
group::rw-
group:a:r--
mask::rwx
other::r--

I first try
Example 1:

Code:

$ setfacl -s user::rwx,group::---,other::---,user:b:r-x z
Usage: setfacl [-bkndRLP] { -m|-M|-x|-X ... } file ...
Try `setfacl --help' for more information.

Before on another websites' tutorial I learned: 1) u for user, g for group and o for other; 2) only option to modify is "-m". Thus I changed as follows:

Code:

$ setfacl -m u::rwx,g::---,o::---,u:b:r-x w
$ getfacl w
# file: w
# owner: a
# group: a
user::rwx
user:b:r-x
group::---
mask::r-x
other::---

Example 2:
The tutorial writes the equivalent of "setfacl -m group:egdoc:+r y", and with the above I correct it and try:

Code:

$ setfacl -m g:egdoc:+r y
setfacl: Option -m: Invalid argument near character 9

Being that I have used the "-m" option successfully before to add permissions for groups with setfacl, I thought that perhaps there is a version problem, thus adjusted the code to the below:

Code:

$ setfacl -m g:egdoc:r y

Changing the "+r" to a "r" really helped.

After this advance, I applied these changes again to example 1, w/o the -s option:

Code:

$ setfacl -m u::rwx,g::---,o::---,u:b:r-x z

{success}

Now, I tried to incorporate the "-s" option in order to fix example 1:

Code:

$ setfacl -s u::rwx,g::---,o::---,u:b:r-x z
Usage: setfacl [-bkndRLP] { -m|-M|-x|-X ... } file ...
Try `setfacl --help' for more information.

$ setfacl -ms u::rwx,g::---,o::---,u:b:r-x z
setfacl: Option -m: Invalid argument near character 1

$ setfacl -sm u::rwx,g::---,o::---,u:b:r-x z
Usage: setfacl [-bkndRLP] { -m|-M|-x|-X ... } file ...
Try `setfacl --help' for more information.

Still no CUBAN CIGAR (no success) with the "-s" option:

Why doesn't anything multiple and/or option "-s" from ibm's tutorial work on linux? Why don't so many manfiles on my system have certain options that the same command would have on websites like ibm and dice.com?

NevemTeve · 07-20-2017, 11:42 AM

Maybe you shouldn't read documentation written for an other platform?
https://linux.die.net/man/1/setfacl

andrew.comly · 07-21-2017, 09:16 AM

Quote:

Originally Posted by NevemTeve

Maybe you shouldn't read documentation written for an other platform?
https://linux.die.net/man/1/setfacl

Again, it looks like die.net really has quite a lot to offer, great suggestion.

Copying the ACL of one file to another:

Code:

-rw-rw-r--+ 1 a a      0  7月 18 21:56 y
-rwxrwx---+ 1 a a      0  7月 18 21:56 z

$ getfacl y | setfacl --set-file=- z

$ ll y z
-rw-rw-r--+ 1 a a 0  7月 18 21:56 y
-rw-rw-r--+ 1 a a 4  7月 21 09:43 z

I then was able to successfully copy the access ACL into the Default ACL:

Code:

$ ll
...
drwxrwxr-x  3 a a   4.0K  7月 10 07:29 dir

$ getfacl --access dir | setfacl -d -M- dir

$ ll
...
drwxrwxr-x+ 3 a a   4.0K  7月 10 07:29 dir

All is well again!