Questions tagged [acl]
The ACL is a security and access component of Operating Systems. It contains a set of entries that determine who and what has access to a specified physical or logical system object.
286
questions
102
votes
3
answers
297k
views
Give write permissions to multiple users on a folder in Ubuntu
There is a folder that is owned by user tomcat6:
drwxr-xr-x 2 tomcat6 tomcat6 69632 2011-05-06 03:43 document
I want to allow another user (ruser) write permissions on document folder. The two users ...
- 1,417
41
votes
2
answers
51k
views
What is the Mac terminal command to remove ACL?
I'm trying to find the terminal command on a Mac to remove ACL to fix user permissions on a folder that gives an error code when I try to copy it (error code -41).
- 411
28
votes
3
answers
42k
views
Copy security permissions of one file to another
I would like to replicate the permissions of a file to another.
I do not want to copy the data, only the permissions.
For example, I created a new file and want it to have the same permissions as ...
- 383
27
votes
11
answers
78k
views
Reset default ACLs for C:\Program Files\WindowsApps
I had to take ownership of the special folder C:\Program Files\WindowsApps to fix a problem with icons. The issue is now resolved, so I'd like to reset the permissions to the way they were before I ...
- 24.8k
21
votes
1
answer
45k
views
users not found in /etc/passwd
I login to a linux box with username user1 and my home folder is in /home. There is another user named user2 that has its home directory in /opt/data/folder.
If I want to check the list of users I ...
- 1,775
19
votes
2
answers
2k
views
How can I list permissions of every component in a file path?
Sometimes it is necessary to determine on which directory in a path access rights are limited. Here is an example:
$ ls /sys/kernel/debug/usb/devices
ls: cannot access /sys/kernel/debug/usb/devices: ...
18
votes
5
answers
16k
views
find files with ACLs set
How can I find all files with some extended ACLs set, i.e. those with a little + at the end of the permission flags shown by ls -l.
I could not find a corresponding flag for find. My naive approach ...
17
votes
3
answers
36k
views
Setting differing ACLs on directories and files
I want to set up default permissions for a file share so that everyone can rwx all of the directories and so that all newly created files are rw.
Everyone who is accessing this share is in the same ...
- 173
17
votes
3
answers
45k
views
How do I remove any SELinux context or ACL?
HI, I have some files, that I'd like to remove the SELinux context or ACLs from (denoted by a '.' or a '+' respectively when using ls -alZ).
I don't have too much time on my hands to read on the , ...
- 2,881
15
votes
1
answer
12k
views
Leave ACL handling to Windows with Cygwin rsync
I'm running an rsync command, copying my files from a server to my Windows machine like:
rsync -rt --partial-dir=".rsync" --del rsync://server/a/ a/
Whenever this command creates a directory, it ...
- 3,531
12
votes
2
answers
41k
views
How do I remove permission to specific user using setfacl
I just executed the following command
setfacl -m user:userXXX:r /home/userYYY/private/
now I see
$ ll /home/userYYY/private/
total 32
drwx------+ ...
- 255
12
votes
3
answers
2k
views
Where does the file owner on Windows matter, seeing that there are ACLs?
Coming from a Linux background, I'm used to a file having an owner, and a owning group. Access permissions can be set separately for owner, group, and others, and that's it.
Now on (NT-based) Windows,...
- 23.2k
12
votes
2
answers
18k
views
NTFS Permissions - SYSTEM
Are there any possible side effects to removing permissions for SYSTEM on an NTFS directory? It is a non-system (user documents) folder. I know the obvious (i.e., that SYSTEM will no longer to be able ...
user73728
11
votes
3
answers
23k
views
Why are file permissions retained when moving files within the same volume?
Ocassionally, we have the problem that a file has permissions different from the folder where it's in.
Now I found out that there's a KB article explaining the reason behind this:
By default, an ...
- 273
11
votes
2
answers
54k
views
Change registry permissions via command line (batch file)
I found an awesome Reg Hack for Windows 7, that renames the 'Computer' icon to something like %username% on %computername%. Unfortunately, in the tutorial, it says to change permissions of the ...
- 24.4k
10
votes
2
answers
49k
views
Remove ACLs in Linux permissions
I have files that have a plus sign next to the permissions -rwxrwx---+ on a Linux samba server. I found the setfacl command to adjust the acl settings, I would like to remove the ACL completely, ...
- 451
10
votes
2
answers
5k
views
Restrict access to a folder by EXE
Is it possible in Windows 7 to restrict which EXEs can access a certain folder?
Let's imagine I have a folder (c:\myfolder) with some data files that can only be opened by a certain EXE.
For ...
- 137
10
votes
3
answers
9k
views
How to copy Time Machine volume to another disk using rsync while preserving ACLs?
Recently I had to change my Mac's filesystem from case-preserving to being fully case-sensitive. I did that by using CCC and copying data to another disk, then returning back to newly formatted main ...
- 201
7
votes
1
answer
62k
views
How to change file permissions on Windows via powershell / cmd?
I want to achieve the permissions aspect equivalent on Windows side via PowerShell or cmd, however I couldn't find a solution in order to correctly do this. If someone could help me to achieve this in ...
7
votes
1
answer
9k
views
ACL vs standard file permissions - which are used when accessing file?
ACLs and standard file permissions seem to be synchronized:
$ getfacl test.cpp
# file: test.cpp
# owner: scdmb
# group: scdmb
user::rw-
group::rw-
other::r--
$ ls -l test.cpp
-rw-rw-r-- 2 scdmb ...
- 1,181
6
votes
2
answers
12k
views
Why do you need execute permission on the parent directory to rename a file
On Linux/Unix file-systems, I understand the reason why you need the execute permission on the parent folder to read or write a file: the execute permission gives you access to the inode on the file, ...
- 193
6
votes
2
answers
2k
views
Windows with Full Control to Everyone for Everything
Similar to sudo chmod -R 777 /, but for Windows 7. A customer decided he hated the prompts for administrators to continue, so he gave himself Full Control for the Everyone group on Windows 7. Now, ...
- 24.4k
6
votes
1
answer
5k
views
How do I add add urlacl to already used 443 port?
I am trying to give uralacl to my user ad\user running this command:
netsh http add urlacl url=http://+:443/ user=ad\user
but getting this error:
Url reservation add failed, Error: 183
Cannot ...
6
votes
2
answers
6k
views
Use /sys/class/gpio/ in Python without root permissions
I want to interact with the GPIO pins using the Python module Ablib. And I want to do this without root permissions. How can I achieve this?
When I create an ablib.Pin instance the module opens /sys/...
- 358
5
votes
2
answers
2k
views
why setting acl for a user changes group perms in ls output?
I'm trying to figure out why the output of ls command has changed. I mean group permissions for a file.
I've created a file named "file" and changed its owner&group:
[root@training group3]# ...
- 53
5
votes
3
answers
977
views
How can I add a user from Windows 8 to an ACL on Windows 7?
The title pretty much says what I want to do.
I have a dual-boot setup with Windows 7 and Windows 8. Is there an easier way of doing this? I do not want to takeown the files, just add a user (or two) ...
- 24.4k
5
votes
3
answers
6k
views
NTFS Permissions for parent folder to make subfolders accessible
Quick scenario on a local Windows system.
Drive E: is formatted with NTFS has the following layout and permissions:
E:\ (JohnDoe)
E:\folder (Administrator)
E:\folder\...
user73728
5
votes
2
answers
3k
views
Administrator not an Administrator?
I have copied some files from an XP computer to a PC running Windows 7. I am logged on as a user who is marked as an Administrator.
When I try to access the directory, I am told I don't have ...
- 2,017
5
votes
1
answer
4k
views
How do I set default (not inherit) acl permissions on file creation?
This is with a freenas box (FreeNAS-9.3-STABLE-201506292130).
In debian-based linux generally there is a default permissions of 644/755 for files/directories (now 664/775?). As I understand it, this ...
- 452
5
votes
2
answers
21k
views
What is Special Permissions?
I was checking the security rights for the folder C:\Windows\System32\Tasks and find that Authenticated Users group has Special Permissions (notice that it has no Write permissions):
I went into ...
- 1,247
5
votes
2
answers
6k
views
Using NFSv4 ACLs on Linux
I have successfully set up an NFSv4 client and server, roughly following the guide at Setting Up NFS HOWTO. Both are running Ubuntu Linux 14.04. This is a small test environment without complicated ...
- 191
4
votes
4
answers
8k
views
Efficiently and Safely Deleting or Un-Trashing Time Machine Backups
I have been storing my Time Machine backups on an external drive. Noticing that space was getting low, I viewed that external drive in the Finder, selected a bunch of the folders and moved them to the ...
user29099
4
votes
1
answer
8k
views
Using the command "id" in Linux?
I have some doubts with the use of the command id in Linux...
I have added one user(andre) to the group "github-total", do if I do id andre I got:
$ id andre
uid=500(andre) gid=500(andre) groups=500(...
- 259
4
votes
1
answer
9k
views
Windows: How do I remove a file's ACL, and just let it inherit the ACL on the containing directory?
Scenario: I unpack a file into a temp directory.
Then I movve the file into a different directory. I want the file ACL to only include the perms stipulated in the new containing directory. How ...
- 2,149
4
votes
1
answer
6k
views
What does the + mean in the output of "ls -l"?
ls -l
-rwxr-xr-x 1 root root 885 2010-07-08 13:55 /etc/backup-number-of-files*
-rwxrwxr-x+ 1 levchuk Users 1067 2010-08-30 14:37 /etc/backup-running-time*
Please notice the + on the 2nd line....
4
votes
1
answer
1k
views
How to restrict other programs from reading a certain file on Windows 10?
Secret files such as ssh private keys are stored in plain on the disk.
There is only one user account on my computer.
Programs like ssh.exe need to read these files, and I want to view them by text ...
- 43
4
votes
5
answers
2k
views
Deny access to Network Adapter in Windows
I have set up a maintenance Network via OpenVPN. However, when I log into a computer (e.g. via remote desktop) and someone else is using it at the same time I have either to accept that she is able to ...
- 200
3
votes
1
answer
7k
views
How do you set the default user in Linux for file creation?
I want to create a directory, for example:
/public/all
But I want it so that if you create a file in all, the owner is root, but anyone with access to the /public/all folder can delete/edit/etc the ...
- 356
3
votes
1
answer
3k
views
Why would the NTFS ACL utility `icacls` alter the system partition behind the scene?
I attached an hdd to my win7 machine and assigned the drive letter I: to the only partition on the hdd. The hdd was originally from another computer, and to avoid all those "you don't currently have ...
- 5,345
3
votes
3
answers
2k
views
How can I prevent access to my home directory from another root user?
This question was asked during an interview with Google and I can't find any answer.
I'm thinking of encrypting your home directory, but if anyone has done it before, i'd appreciate if you can share ...
- 33
3
votes
3
answers
3k
views
NTFS permissions - "Inherited from"?
I have a NTFS external hard disk. It was in use primarily with one laptop, but that laptop has since been replaced. With my new laptop, I'm finding all my files are now read-only. The "read-only" ...
- 2,502
3
votes
2
answers
7k
views
How to enable ACL?
I've installed ACL on my Ubuntu:
aptitude install acl
What is the next step ? /etc/fstab ?
# /etc/fstab: static file system information.
#
# Use 'blkid -o value -s UUID' to print the ...
- 41
3
votes
2
answers
2k
views
Best way to copy user files from NTFS drive pulled from another system?
I have a couple of boxes full of disc drives that were pulled from systems over the years. I'd like to copy files to a new drive - particularly user data files (such as from "My Documents" or ...
- 542
3
votes
1
answer
2k
views
Why is current CPU frequency read-only for root?
I have a program that provides benchmarks, but its OS agnostic and does not know how to read CPU frequencies. The test program is driven through a script. If I provide the CPU frequency, then the ...
- 12.2k
3
votes
1
answer
3k
views
Dump/show ACL in GNU screen
I'm trying to make an interface to make it easier to set ACL in screen. Setting ACL is quite easy, however, I can't find a way to show or dump the existing ACL. A look in the archives of this list ...
- 3,851
3
votes
1
answer
613
views
What is the meaning of the manage-gids parameter in /etc/nfs.conf?
I have run into an issue (on a system which I am not root) where there is a directory using an acl to manage access, I should be allowed access (and I am allowed access if I do a newgrp to one of the ...
- 33
3
votes
1
answer
851
views
Unable to add myself to any ACL while using Azure AD
When I received a new laptop at the beginning of the week, the initial setup walked me through gaining access to my workplace's domain using my work email address, which is also associated with my ...
- 587
3
votes
1
answer
1k
views
Does WinSCP support Linux ACLs?
A Windows desktop user is using WinSCP client to connect to a Linux server to pick and drop files. The client seems not to recognize the Access Control List (ACL) for this directory. Does WinSCP ...
- 41
3
votes
1
answer
15k
views
How to add a SID to a folder permissions
How can I add a specific SID to a folder's access control list? I'd like to give it permission to read.
I'd like to have the final ACL look like this:
- 147
3
votes
1
answer
3k
views
Mac OS X ACL and file permissions
I'm trying to share a directory between 2 users, so that both have full access to it and to any files, and directories created within. Here are the things I've done so far:
Create a group for the 2 ...
- 333