setfacl

fredao · #1 (**permalink**) 03-20-2007

I use:

setfacl -m user:bbb:rwx folder1

to give user bbb the permission to go into my folder folder1,

and

cd folder1
setfacl -m user:bbb:rwx *

to give bbb the permission under this folder.

however, bbb can not cd to folder1, and got "permission denied" messages.

the umask is 0022.

Can anyone tell me why, and how to fix it? Thanks!

blowtorch · #2 (**permalink**) 03-20-2007

Run the getfacl command and check the mask on the file/directory involved. Usually you have to set the mask to allow whatever permissions you are allocating.

For example:

Code:

# ls -l output.txt 
-rw-------   1 root     other        831 Sep 27 10:34 output.txt
# getfacl output.txt

# file: output.txt
# owner: root
# group: other
user::rw-
group::---              #effective:---
mask:---
other:---
# setfacl -m u:samba:rw- output.txt
# getfacl output.txt

# file: output.txt
# owner: root
# group: other
user::rw-
user:samba:rw-          #effective:---
group::---              #effective:---
mask:---
other:---
# setfacl -d u:samba:rw- output.txt

# setfacl -m u:samba:rw-,m:rw- output.txt
# getfacl output.txt

# file: output.txt
# owner: root
# group: other
user::rw-
user:samba:rw-          #effective:rw-
group::---              #effective:---
mask:rw-
other:---

Note the changes in the setfacl command and the corresponding changes in the effective permissions.

fredao · #3 (**permalink**) 03-21-2007

the mask is ---. Can you tell me how to change the mask for the file?

blowtorch · #4 (**permalink**) 03-21-2007

Simply rerun your setfacl command, just add ",m:r-x" after the user specific entries. You can see the setfacl command with the mask settings towards the end of my example above as well.

More UNIX and Linux Forum Topics You Might Find Helpful
Thread	Thread Starter	Forum	Replies	Last Post
Setfacl permission issue	MeganP	Shell Programming and Scripting	0	08-01-2007 05:15 PM
overriding the mask in setfacl	aladdin	UNIX for Dummies Questions & Answers	4	05-30-2007 03:11 AM
setfacl -x doesn't shows it removed the ACL	braindrain	Shell Programming and Scripting	0	08-01-2006 05:09 AM
Usage of setfacl	chakri400	Security	1	10-31-2003 11:04 AM

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes	Rate This Thread
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode	Rate This Thread:


	Powered by