Visit Our UNIX and Linux User Community


ACL confusion


 
Thread Tools Search this Thread
Top Forums UNIX for Advanced & Expert Users ACL confusion
# 1  
Old 10-14-2017
ACL confusion

All,

I am trying to clear ACL's completely from all files and folders in a directory. I can get the directories as cleared as:

Code:
# owner: root
# group: root
user::rwx
group::r-x
other::rwx
default:user::rwx
default:group::r-x
default:other::r-x

What ever I do I can't remove the defaults from the directories. I have traversed back up the directory tree to confirm that there are no visible (no + at the end of any directories) ACL's present, but still the same behavior. I run:

Code:
# setfacl -k <dir>

and still receive:

Code:
# owner: root
# group: root
user::rwx
group::r-x
other::rwx
default:user::rwx
default:group::r-x
default:other::r-x

Can anyone shed some light on what using the '-k' flag does nothing, or provide some guidance as to possibly a '-x' flag string that would remove the default settings?

Nothing I have tried has worked.

Thank in advance,

HB
# 2  
Old 10-15-2017
Can you use setfacl -b <dir> option to clear all ACL entries ?

This will leave only regular permissions.

Hope that helps
Regards
Peasant.
This User Gave Thanks to Peasant For This Post:
# 3  
Old 10-16-2017
@Peasant, thank you for the response.

Unfortunately using the '-b' flag does nothing at all. I would expect to be able to do:

Code:
# setfacl -b <dir>
# setfacl -k <dir>

And all ACL's would be removed back to regular permissions, but this isn't the case. Neither command removes ACL's. As I mentioned, I thought it might be that they were just getting inherited from up the directory tree but there are no ACL's up the tree.

Any thoughts on what might be causing the '-b' and '-k' to do nothing to the ACL's? Possibly an issue with a mask?

Thanks,

HB
# 4  
Old 10-16-2017
setfacl -dx [acl lists ] delete files/directories ACLs for the default (-d is default) (-x removes -X also removes)

Try reading the ACL man page first, then read the setfacl page -- links below. Based on your comments I think you may have gotten some wrong information. Make sure you understand what you are doing, create a dummy directory with some files - touch creates empty files. Play with your dummy directory and files FIRST before you trash something like the /usr directory tree irrevocably - and lose your system.

setfacl(1): set file access control lists - Linux man page
acl(5): Access Control Lists - Linux man page
This User Gave Thanks to jim mcnamara For This Post:
# 5  
Old 10-17-2017
Thanks for the reply. No, this is not a system directory. It is 25TB of unstructured data.

I was unable to come up with a solution prior to needing it back online so I remounted the directory without the 'acl' option to avoid the permission confusion. I will need to address this in the next couple weeks and will update on the progress..

HB

Previous Thread | Next Thread
Test Your Knowledge in Computers #372
Difficulty: Easy
The Ericsson implementation of Erlang uses DREAM bytecodes.
True or False?

8 More Discussions You Might Find Interesting

1. UNIX for Advanced & Expert Users

Need assistance on ACL

Hi Friends, I went through the ACL threads that were posted in the past but none were matching to my requirement . Hence starting a new thread . Challenge : user : a group : Test1 user: b group: Test2 Say under user a i create dir /tmp/debug with the privilege of 755 and also... (3 Replies)
Discussion started by: leobreaker
3 Replies

2. HP-UX

When did HP-UX have support for ACL?

Hello, I try to find what year HP-UX got support for ACL (Access Control List)? I know that HP-UX was the first Unix with ACL support, but it is very hard to find the information on when that occured. So anyone here know when that did happen? Any answers are appreciated, /eXpander (1 Reply)
Discussion started by: eXpander
1 Replies

3. Solaris

ACL

Can i get the synopsis for add multiple users in single command for ACL access for a directory or a file thanks in advance dinu (3 Replies)
Discussion started by: dinu
3 Replies

4. Linux

ACL

Hi, I want to know what does the "effective" comment means in the output of the getfacl and whether it has to do with the acl mask... thanks (0 Replies)
Discussion started by: Gartlar
0 Replies

5. Shell Programming and Scripting

Need help to create ACL

Hi, I generated a script that will create the list of dir/sub-dir and will allow to create the same on diff server. this is what i have done : #!/bin/ksh # Script to migrate the directory between the two servers. # Ver 0.1 # Author Krishna. D # c - create and e - extract directory if ;... (1 Reply)
Discussion started by: krishnadvn
1 Replies

6. AIX

setting acl

Hi, I want to know how to set acl in aix via smitty and shell prompt, wheather we needs to install additional packages. (0 Replies)
Discussion started by: manoj.solaris
0 Replies

7. UNIX for Dummies Questions & Answers

ACL vs privileges

Hello genius..! what do y'all think of these questions...? help appreciated...! Access Control Lists and privileges.... # Why both file ACLs and user permissions/privileges (not to be confused with rights in ACLs) are used in Windows access control (why not just use one of these)? # In... (1 Reply)
Discussion started by: heroine
1 Replies

8. Cybersecurity

ACL

Hi all, I've just been handled the responsibility for a FTP-site. Having no experiens of UNIX at all. And now one of my users needs to have full access to the usr directory and all it's subdirectories, don't know why just trying to do what the boss tells me. The type of UNIX is FreeBSD and the... (4 Replies)
Discussion started by: -tri-
4 Replies

Featured Tech Videos