Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
file ACL [kinda solved]
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
Dagger
Retired Dev
Retired Dev


Joined: 11 Jun 2003
Posts: 765
Location: UK

PostPosted: Fri Dec 21, 2007 11:29 am    Post subject: file ACL [kinda solved] Reply with quote

Hi,

I'm trying to set up a folder with multiple ACL on it, but I'm having a hard time.

my folder is called FOLDER1. I want to set up RX access for 5 users and RWX access for a GROUP1 (recursively and with default permission)

when i do:
Code:

setfacl -d -m u:USER1:rx FOLDER1
setfacl -R -m u:USER1:rx FOLDER1
setfacl -d -m g:GROUP1:rwx FOLDER1
setfacl -R -m g:GROUP1:rwx FOLDER1


folders permissions are:
Code:

# file: FOLDER1
# owner: RANDOM_USER <- different from USER1
# group: GROUP1 <- same but irrelevant
user::rwx
user:USER1:r-x
group::rwx
group:GROUP1:rwx
mask::rwx
other::---
default:user::rwx
default:user:USER1:r-x
default:group::rwx
default:group:GROUP1:rwx
default:mask::rwx
default:other::---


everything _seems_ to be fine untill I try to copy file to FOLDER1

FILE1 has:
Code:

# file: FOLDER1/FILE1
# owner: root
# group: root
user::rw-
user:USER1:r-x         #effective:r--
group::rwx         #effective:r--
group:GROUP1:rwx      #effective:r--
mask::r--
other::---

I've tried changing it to
Code:

setfacl -d -m u:USER1:rx,m:rx FOLDER1
setfacl -R -m u:USER1:rx,m:rx FOLDER1
setfacl -d -m g:GROUP1:rwx,m:rwx FOLDER1
setfacl -R -m g:GROUP1:rwx,m:rwx FOLDER1


but it doesn't really change anything as mask is overwriten. How can I specify umask 0202 for ACL entries?

thanks for help
_________________
95% of all computer errors occur between chair and keyboard (TM)
Join the FSF as an Associate Member!
Post under CC license.


Last edited by Dagger on Fri Dec 21, 2007 4:15 pm; edited 1 time in total
Back to top
View user's profile Send private message
Dagger
Retired Dev
Retired Dev


Joined: 11 Jun 2003
Posts: 765
Location: UK

PostPosted: Fri Dec 21, 2007 4:15 pm    Post subject: Reply with quote

well... 2h later I realised that it actually WORKS despite effective #effective:r--. I can see execute, and delete the file. stupid.
_________________
95% of all computer errors occur between chair and keyboard (TM)
Join the FSF as an Associate Member!
Post under CC license.
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum