changing UGO to ACLs on a file Post: 302327260

Sponsored Content

Top Forums UNIX for Advanced & Expert Users changing UGO to ACLs on a file Post 302327260 by davchris on Saturday 20th of June 2009 11:24:43 AM

06-20-2009

Registered User

The purpose is to set vxfs quota on existing files that have no particular ACL set. I have no other way than getting UGO permissions and change them to ACLs for to recalculate the exact quota usage on files for a usergroup, I will have to chgrp the group to which quota is set on ...
I'll try to explain this way :
at the moment I have this directory

drwxrwxr-x user1 grp1 toto -> no particular ACL
containing one of the files :
-rwxrwxr-x user2 grp2 file1 -> no particular ACL

To set the quota for grp1 and grp2 usergroups, I create a group named i.e "global" and set quota on it. I also recursively chown the owner and the "global" group of the files as the quota will be calculated on the "global" group. The old UGO permissions will be changed to ACL on folders and files to maintain the access rights set before.
This way, the files will UGO belong to an user that has unlimited quota, they will belong to the "global" group, and users still be able to access their files through the ACLS.

drwxrwxr-x uluser global toto -> acl set for user1 and grp1
containing one of the files :
-rwxrwxr-x uluser global file1 -> acl set for user2 and grp2
Quota calculated for global group

I'm aware that I will have to crontab a script that recursively propagate the "uluser" and "global" UGO permissions to calculate the quota on new files

davchris

View Public Profile for davchris

Find all posts by davchris

9 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

changing csv file contents to file of rows

i have a file a.txt contents as 1,2,3,4,......etc...in a single line, i want to write to another file in rows as 1 2 3 4 5 can u help? i do not know the length of a.txt

2. UNIX for Dummies Questions & Answers

Changing file content based on file header

Hi, I have several text files each containing some data as shown below: File1.txt >DataHeader Data... Data... File2.txt >DataHeader Data... Data... etc. What I want is to change the 'DataHeader' based on the file name. So the output should look like: File1.txt >File1 ...

3. Emergency UNIX and Linux Support

Squid acls

Hi guys, There is a line in squid default configuration: # Deny CONNECT to other than secure SSL ports http_access deny CONNECT !SSL_ports acls are applied from top down, so CONNECT acl will deny access to all non SSL and SSL ports. I mean it never reaches the second access rule.

4. Red Hat

Chmod overiding default ACLs.

Afternoon all, This should be a simple task. I have set up default acls on a directory to allow user user1 to read it. This directory is owned by root:root. setfacl -d -m u:user1:rx /directory I also did via the group. This works fine, new files made by root are readable. ...

5. Solaris

ZFS ACLS and vim

Hi, Does anyone know a way of making vim preserve ZFS NFSv4 ACLS? Without disabling file backups in vim that is. Thanks in advanced.

6. UNIX for Advanced & Expert Users

Does regular Linux installation in fact uses any ACLs in any file/dir?

Hi everybody As the title says I wonder if the usual (in my case Ubuntu 14.04 LTS) linux installation root does in fact uses any of the ACLs possible extensions in any of its files/dirs I ask this because I usually use tar to backup the entire root (in offline) with a command like this (root...

7. Red Hat

ACLs - How can i create new executable files

Hello experts, I would like to know if is possible to create a default acl rule to a directory. in this directory all files created should have executable permissions by the group IT. i tried setfacl -m d:g:it:rwx /files tried to change the mask setfacl -m m::rwx /files but i still...

8. Red Hat

Is there limit on number of ACLs' per directory in Redhat

I work on a distribution application on Linux which generates bulk reference data extract feeds and stores them on a Linux server. I have several consumer applications access the files stored on this Linux server using FTPS protocol. However in order for consumer applications to have access to...

9. AIX

Unable to set ACLs on sulog - need to grant read permission to a normal user on AIX 6.1

Hi, I need to grant read permission to a normal user on sulog file on AIX 6.1. As root I did acledit sulog and aclget shows "extended permissions" as "enabled" and normal user "splunk" has read permissions. When I try to access sulog as splunk user it won't allow and aclget for splunk user...

LEARN ABOUT OSF1

dxsetacl

dxsetacl(8X)															      dxsetacl(8X)

NAME

       dxsetacl - Graphical interface for setting the ACL on a file or directory

SYNOPSIS

       /usr/bin/X11/dxsetacl [arguments...]

OPTIONS

       The name of the file or directory to operate on.  The regular X resources can be supplied to dxsetacl on the command line.

DESCRIPTION

       The dxsetacl command provides a graphical interface for examining and setting file access control lists (ACLs).

       If  a  path is specified on the command line, the file system object represented by path is used as the target of the command. In addition,
       there is a Find Object area on the main dialog box. A path may be typed in, or located by browsing the file system. A file reference may be
       dragged	from  a  CDE application, such as the File Manager, and dropped on the Find Object area. Once an object is selected, its full path
       name, object type, owner, and group are displayed along with the ACL.

       The ACL is displayed, one entry per line, in a list widget. Clicking on an entry selects it.  Double clicking on an entry or selecting  the
       Change Entry button brings up a dialog that allows the fields of the entry to be modified.  Clicking on the Delete Entry button removes the
       entry.  The owning user, owning group, and other user entries may be modified but not deleted.  (See acl(4) for more information.)  The New
       Entry button may be used to create a new group or user entry.

       If  the	object	is a regular file, device special file, or UNIX domain socket, it only has an access ACL. If the object is a directory, it
       has an access ACL, a default access ACL, and a default directory ACL. Which ACL of a directory is being edited may be selected with a radio
       button.

									  Note

       The dxsetacl command will show and set ACLs on file system objects, regardless of whether ACLs are used by the system for access decisions.
       The sysman secconfig utility is used to enable ACL checking.

SEE ALSO

       Commands: X(1X), secconfig(8)

       Files: acl(4)

																      dxsetacl(8X)