Setting up existing Directories using facls to recursively add an individual user Post: 302509401

Sponsored Content

Top Forums UNIX for Dummies Questions & Answers Setting up existing Directories using facls to recursively add an individual user Post 302509401 by amadont12 on Wednesday 30th of March 2011 08:35:13 PM

03-30-2011

Registered User

Setting up existing Directories using facls to recursively add an individual user

I've been working with Solaris/Linux for about 4 months now. Let me explain the scenario. There will be two users involved. The owner (curOwner) and the new user (newUser). The server in question is a Solaris 10 box.

So curOwner runs an application that is constantly writing logs to lets say.

Code:

/opt/apps/log

In the directory exists various logs of all sorts. All owned by curOwner. The application is constantly writing logs to the directory so it's important that none of curOwners rights are disturbed.

I need newUser to have the ability to "rwx" all current and future files under opt/apps/log directory(and ONLY the 'log'" directory). From what i understand there are multiple entries i have to make using the find command and setfacls. I'm struggling with getting it to take the setfacls command in conjunction with find.

Code:

find log -type f -exec setfacl -s u::rw-,g::r--,o:r--,g::rw-,m:rw- {} \;

find log -type d -exec setfacl -s u::rwx,g::r-x,o:r-x,m:rwx,d:u::rwx,d:g::r-x,d:o:r-x,d:m:rwx {} \;

find log -type d -exec setfacl -m group::rwx,d:g::rwx {} \;

From what i understand i need to run these three lines in conjunction to first set the dir and file access lists. Then make the files under the directory always inherit the proper rights. Yet i can't seem to dicipher what i'd need to do in order to make only newUser have the appropriate rights without disrupting curOwner. Can anyone help?

---------- Post updated at 08:35 PM ---------- Previous update was at 05:21 PM ----------

Did i frame this question incorrectly? Are there alternatives from using facls? Any input would be great.

Last edited by Scott; 03-30-2011 at 06:31 PM.. Reason: Please use code tags

amadont12

View Public Profile for amadont12

Find all posts by amadont12

9 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

Recursively deleting directories

Say I have a directory call test, and several directories nested in it, and several directories nested in them. And I want to remove all directories within "test" and its subdirectories that have the name "cvs", how can I do this? I tried rm -r cvs, but that only removed the top level direcotry...

2. UNIX for Dummies Questions & Answers

How to display directories recursively?

Cannot find how to list the directory structure of a volume recursively. Do not want the files reported. Say I have 100 directories and 10,000 files, I do not want 10,000 lines of output. (If this is relevant, I am using the terminal on my OSX Mac). I hope this is easy - there should be an easy...

3. Solaris

Add existing user into an existing group

Pre: no gpasswd/adduser there is just usermod can be used, also there is no -a option for usermod. How should I add a user into a group?

4. Shell Programming and Scripting

Shell script to execute commands in individual users' home directories

Hi, I am trying to write a shell script which execute certain commands within certain folders in each user's home directories I started off with a bash script - #!/bin/csh -f su -l cvsusr1 cvs -d /home/cvsadm/repository status But the shell script finishes immediately after...

5. Shell Programming and Scripting

Finding directory and sub-directories individual size in Perl

Hi, Can anyone redirect to an existing thread or provide some info on how to find the size of a directory and it's sub-directories using a single script ? I tried finding a similar thread but in vain. I'm a newbie and any help would be greatly appreciated. Thanks in advance.

6. UNIX for Advanced & Expert Users

Recursively delete only specified directories with given pattern

Hi All, We have a requirement to recursively delete the directories and its subdirectories older than 60 days based on timestamp (folder creation timestamp)under certain directory. However it has some specific requirements. The directories will continue to be there upto any depth. the...

7. UNIX for Dummies Questions & Answers

List directories and sub directories recursively excluding files

Hi, Please help me, how to get all the direcotries, its sub directories and its sub directories recursively, need to exclude all the files in the process. I wanted to disply using a unix command all the directories recursively excluding files. I tried 'ls -FR' but that display files as...

8. Shell Programming and Scripting

Recursively rename directories

I have this directory tree under /apps/myapp/data: imageshack.us/photo/my-images/703/foldersc.png How to recursively rename ONLY directories with 5 digits (00000, 00100, 00200,..., 00007, 00107,...)? I want to add to their name two more zeros: Before: 00107 After: 0000107 Thanks in...

9. Shell Programming and Scripting

Recursively Searcing file in the directories

i have directory dgf in the dgf( some other Sub-dir are there) 00 01 02 03 04 in all the Sub directory there is a SG.csv .. i want the scripts should run one by one Sub-dir and print the result for that particular Sub-dir ..then go to next Sub-Dir and print the result....... please...

LEARN ABOUT CENTOS

alter_server

ALTER 
SERVER(7) 					  PostgreSQL 9.2.7 Documentation					   ALTER SERVER(7)

NAME

       ALTER_SERVER - change the definition of a foreign server

SYNOPSIS

       ALTER SERVER name [ VERSION 'new_version' ]
	   [ OPTIONS ( [ ADD | SET | DROP ] option ['value'] [, ... ] ) ]
       ALTER SERVER name OWNER TO new_owner
       ALTER SERVER name RENAME TO new_name

DESCRIPTION

       ALTER SERVER changes the definition of a foreign server. The first form changes the server version string or the generic options of the
       server (at least one clause is required). The second form changes the owner of the server.

       To alter the server you must be the owner of the server. Additionally to alter the owner, you must own the server and also be a direct or
       indirect member of the new owning role, and you must have USAGE privilege on the server's foreign-data wrapper. (Note that superusers
       satisfy all these criteria automatically.)

PARAMETERS

       name
	   The name of an existing server.

       new_version
	   New server version.

       OPTIONS ( [ ADD | SET | DROP ] option ['value'] [, ... ] )
	   Change options for the server.  ADD, SET, and DROP specify the action to be performed.  ADD is assumed if no operation is explicitly
	   specified. Option names must be unique; names and values are also validated using the server's foreign-data wrapper library.

       new_owner
	   The user name of the new owner of the foreign server.

       new_name
	   The new name for the foreign server.

EXAMPLES

       Alter server foo, add connection options:

	   ALTER SERVER foo OPTIONS (host 'foo', dbname 'foodb');

       Alter server foo, change version, change host option:

	   ALTER SERVER foo VERSION '8.4' OPTIONS (SET host 'baz');

COMPATIBILITY

       ALTER SERVER conforms to ISO/IEC 9075-9 (SQL/MED). The OWNER TO and RENAME forms are PostgreSQL extensions.

SEE ALSO

       CREATE SERVER (CREATE_SERVER(7)), DROP SERVER (DROP_SERVER(7))

PostgreSQL 9.2.7						    2014-02-17							   ALTER SERVER(7)