overriding the mask in setfacl


 
Thread Tools Search this Thread
Top Forums UNIX for Dummies Questions & Answers overriding the mask in setfacl
# 1  
Old 05-27-2007
overriding the mask in setfacl

hello everbody:
Im trying to give the user "ydarwish" a full access over some directory on my sol9 machine.
however the setfacl is recalculating the mask parameter keeping me from keeping him effective write and read access:

Code:
root@Obi-Wan> setfacl -m u:ydarwish:rwx /IN_ARCHIVE6
root@Obi-Wan> getfacl /IN_ARCHIVE6

# file: /IN_ARCHIVE6
# owner: oracle
# group: oinstall
user::rwx
user:ydarwish:rwx               #effective:r-x
group::r-x              #effective:r-x
mask:r-x
other:r-x

do you have any idea how I can give the user effective rwx??I tried the -n option but didnt work:


Code:
root@Obi-Wan> setfacl -n -m u:ydarwish:rwx /IN_ARCHIVE6
setfacl: illegal option -- n
usage:
        setfacl [-r] -f aclfile file ...
        setfacl [-r] -d acl_entries file ...
        setfacl [-r] -m acl_entries file ...
        setfacl [-r] -s acl_entries file ...

Thanks alot guys
# 2  
Old 05-27-2007
you can try the -s option
# 3  
Old 05-27-2007
Change the mask.

Code:
zazzybob@host ~ $ touch filename
zazzybob@host ~ $ getfacl filename

# file: filename
# owner: zazzybob
# group: sysadmin
user::rw-
group::r--              #effective:r--
mask:r--
other:r--
zazzybob@host ~ $ setfacl -m u:oracle:rwx filename
zazzybob@host ~ $ getfacl filename

# file: filename
# owner: zazzybob
# group: sysadmin
user::rw-
user:oracle:rwx         #effective:r--
group::r--              #effective:r--
mask:r--
other:r--
zazzybob@host ~ $ setfacl -m m:rwx filename
zazzybob@host ~ $ getfacl filename

# file: filename
# owner: zazzybob
# group: sysadmin
user::rw-
user:oracle:rwx         #effective:rwx
group::r--              #effective:r--
mask:rwx
other:r--

Cheers
ZB
# 4  
Old 05-27-2007
Thanks alot for your help guys.
I updated the mask.
but I wasnt sure about the -s option, if it will remove the old entries and keep only the newl;y entered ones??

thanks again
# 5  
Old 05-30-2007
Here is the surprise:
I updated the facl of the directory nowI can see the effective permission of that user "ydarwish" is rwx. However the user is not being able to create a file inside it. Smilie

Code:
root@Obi-Wan> getfacl /IN_ARCHIVE6

# file: /IN_ARCHIVE6
# owner: oracle
# group: oinstall
user::rwx
user:ydarwish:rwx               #effective:rwx
group::rwx              #effective:rwx
mask:rwx
other:rwx

do you have any idea where should I check??
 
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

[Solved] Help with Overriding a Prompt in UNIX/Java

I am executing a shell script which contains a jar call to an external java package for which I don’t have a read access to. The external package was written in such a way that whenever we make a java –jar call to the package, it shows a prompt on the console asking if we want to continue or no... (1 Reply)
Discussion started by: Harry1302
1 Replies

2. UNIX for Dummies Questions & Answers

What is mask and effective right mask in setfacl?

Hi Guys, can someone explain what is mask and effective right mask in setfacl and getfacl command with example, unable to get it. (3 Replies)
Discussion started by: Jcpratap
3 Replies

3. UNIX for Advanced & Expert Users

Overriding Mailx Command

Hello All, I am working on a project where the requirement is override mailx command in such way that, instead of sending mailing to email addresses coded in codes, it should send mails to one common email address at run time. We do not intend to change the email addresses in codes. This... (1 Reply)
Discussion started by: shubh05
1 Replies

4. Red Hat

Samba create mask and dir mask on RHEL 4.8

Hi Experts, I'm using samba -3.6.1 on Red Hat Enterprise Linux ES release 4 (Nahant Update 8) ,all seems ok. The issue im facing is as follows. When ever a user creates a file via windows explorer the permissions assgined to the file are as follows -rw-rwxr--+ 1 tom group2 0 Mar 9... (1 Reply)
Discussion started by: maverick_here
1 Replies

5. Shell Programming and Scripting

Overriding XML File

Hi All, I have an XML file (normally >3mb). I need to loop through this and override with some new (correct) values. Here is a row of data:- <row> <field name="ID">1</field> <field name="Type">a</field> <field name="value1">xxx</field> <field name="value2">xxxx</field> ....... (3 Replies)
Discussion started by: robfwauk
3 Replies

6. Programming

C++ overriding Vs hiding

class B { public: void fns(void){//base def;} }; class D:public B { public: void fns(void) {//new def;} }; I was thinking the above is overriding but somewhere else i found the above is just hiding.Only virtual functions can be considered as overriding? This is the exact statement ... (1 Reply)
Discussion started by: johnbach
1 Replies

7. Shell Programming and Scripting

Overriding PATH

Hello, I'm using Sun solaris . I'm trying to override the environmental variable in my script, however when I execute the script, the PATH whatever being set in .profile is taking precedence. I have done the sanity checks like order of my entry in path, permissions for the user etc., To... (1 Reply)
Discussion started by: brainyoung
1 Replies

8. Programming

overriding the dynamic library

Hi, I wonder how can we override the dynamic library loaded by ld on start up.(dynamic linked application). so that linker uses the new library to find symbols. Is it possible to do. Cheers. (4 Replies)
Discussion started by: Raom
4 Replies

9. IP Networking

overriding /etc/resolv.conf with .nslookuprc file

Hi, I have come across a fact that /etc/resolv.conf can be overrided by using ~/.nslookuprc. Is this completely true...i.e can I completely override /etc/resolv.conf. If so, can I have a list of my own domainnames & Nameservers in ~/.nslookuprc that can override those in resolv.conf. ... (3 Replies)
Discussion started by: smanu
3 Replies

10. AIX

overriding function calls without recompiling

i want to replace the *alloc and free function calls in an existing project with my own functions, to be able to log the adresses etc in a text file. (memoryleak debugging) I think LD_PRELOAD is what i am looking for. That way i could create a Library with my own malloc functions and link them... (1 Reply)
Discussion started by: Lazzar
1 Replies
Login or Register to Ask a Question