linux:access-control-lists

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision		 Previous revision
linux:access-control-lists [2017/10/27 18:17] – [Removing FACLs] michaellinux:access-control-lists [2019/03/07 13:51] (current) – michael
Line 13: Line 13:
 ''Note the **+** sign at the end of the permissions. This confirms that the file has an ACL attached to it.'' ''Note the **+** sign at the end of the permissions. This confirms that the file has an ACL attached to it.''
  
----- 
  
 ===== Viewing ACLs ===== ===== Viewing ACLs =====
Line 38: Line 37:
 </WRAP> </WRAP>
  
-Notice the 3 different user: lines. The first line lists the standard file permissions of the owner of the file. The 2 other user permissions are the individual permission for the user john and sam. The mask field here only applies to the additional permissions we have given to the user and groups. If the mask is set to rwx the read, write and execute permissions will be granted to additional user/groups. If the mask is set to r-x, the write permission will not be granted to additional user/groups.In general, <wrap em>DO NOT</wrap> set mask to anything other than rwx. The mask value doe not affect the standard UNIX user/group/others permissions.+Notice the 3 different user: lines. The first line lists the standard file permissions of the owner of the file. The 2 other user permissions are the individual permission for the user john and sam. The mask field here only applies to the additional permissions we have given to the user and groups. If the mask is set to rwx the read, write and execute permissions will be granted to additional user/groups. If the mask is set to r-x, the write permission will not be granted to additional user/groups.In general, ''<wrap em>DO NOT</wrap> set mask to anything other **than rwx**. **The mask value does not affect the standard UNIX user/group/others permissions.**''
  
  
Line 58: Line 57:
 </sxh> </sxh>
 </WRAP> </WRAP>
- 
----- 
  
  
Line 70: Line 67:
   * FACLs for multiple user and groups can also be set with single command : <code># setfacl -m u:john:rw,g:accounts:rwx /tmp/test</code>   * FACLs for multiple user and groups can also be set with single command : <code># setfacl -m u:john:rw,g:accounts:rwx /tmp/test</code>
  
- 
----- 
  
 ===== Default FACLs on directories ===== ===== Default FACLs on directories =====
Line 120: Line 115:
 </WRAP> </WRAP>
  
----- 
  
 ===== Removing FACLs ===== ===== Removing FACLs =====
Line 134: Line 128:
 <code># setfacl -b /tmp/test</code> <code># setfacl -b /tmp/test</code>
  
----- 
  
 ===== Backing up the FACLs ===== ===== Backing up the FACLs =====
Line 143: Line 136:
 # getfacl -R * > accounts_facl        ( -R -> recursive )</code> # getfacl -R * > accounts_facl        ( -R -> recursive )</code>
  
----- 
  
 ===== Restoring the FACLs ===== ===== Restoring the FACLs =====
  • linux/access-control-lists.1509121038.txt.gz
  • Last modified: 2017/10/27 18:17
  • by michael