Access Control Lists - Revision history

George2 at 13:05, 31 March 2015

2015-03-31T13:05:01Z

2014-07-23T13:51:02Z

2014-07-23T10:39:35Z

2014-07-23T09:53:31Z

2014-07-23T09:53:11Z

2014-07-23T09:52:44Z

2014-07-23T09:52:24Z

2014-07-23T09:52:11Z

2014-07-23T09:51:47Z

2014-07-23T09:51:34Z

← Older revision		Revision as of 13:05, 31 March 2015
Line 10:		Line 10:
	Now we need to do the same for files<br>		Now we need to do the same for files<br>
	find . -type f -exec setfacl -m user:my01user:rwx {} \;<br>		find . -type f -exec setfacl -m user:my01user:rwx {} \;<br>
		+	<br><br>
		+	'''Linux facls'''<br>
		+	setfacl -dm u::rwx,g::rwx,o::r /shared/directory - ensure all newly created files are group writeable

← Older revision		Revision as of 13:51, 23 July 2014
Line 1:		Line 1:
		+	To set an access control list on a single file or directory is relatively simple, but most often it is required to set acls on all files and folders within a directory structure. In non acl parlance the set froup id setting is used to define that the group id is inherited from a folder to a folder created underneath it. In acls the "default" acl does the same thing. We need to ensure that
		+
	'''To set the default facl on a directory:'''<br>		'''To set the default facl on a directory:'''<br>
	setfacl -m user::rwx,group::rwx,other:---,mask:rwx,default:user::rwx,default:group::rwx,default:other:---,default:mask:rwx <Directory name><br>		setfacl -m user::rwx,group::rwx,other:---,mask:rwx,default:user::rwx,default:group::rwx,default:other:---,default:mask:rwx <Directory name><br>

← Older revision		Revision as of 10:39, 23 July 2014
Line 4:		Line 4:
	'''To add users to acls in a directory structure with inheritance''' all of the directories in the folder structure must have a "default acl" set. After cd'ing into the relevant directory run the following<br>		'''To add users to acls in a directory structure with inheritance''' all of the directories in the folder structure must have a "default acl" set. After cd'ing into the relevant directory run the following<br>
	find . -type d -exec setfacl -m user::rwx,group::rwx,other:---,mask:rwx,default:user::rwx,default:group::rwx,default:other:---,default:mask:rwx {} \;<br>		find . -type d -exec setfacl -m user::rwx,group::rwx,other:---,mask:rwx,default:user::rwx,default:group::rwx,default:other:---,default:mask:rwx {} \;<br>
		+	Having now set the default acls on all of the directories in the structure we need to add an entry for a particular user as follows<br>
		+	find . -type d -exec setfacl -m user:my01user:rwx,default:user:my01user:rwx {} \;<br>
		+	Now we need to do the same for files<br>
		+	find . -type f -exec setfacl -m user:my01user:rwx {} \;<br>

@@ Line 1: / Line 1: @@
 '''To set the default facl on a directory:'''<br>
 setfacl -m user::rwx,group::rwx,other:---,mask:rwx,default:user::rwx,default:group::rwx,default:other:---,default:mask:rwx <Directory name><br>
-This configures the directory to propage by inheritance any acls added to it for users<br><br>
+This configures the directory to propagate by inheritance any acls added to it for users<br><br>
 '''To add users to acls in a directory structure with inheritance''' all of the directories in the folder structure must have a "default acl" set. After cd'ing into the relevant directory run the following<br>
 find . -type d -exec setfacl -m user::rwx,group::rwx,other:---,mask:rwx,default:user::rwx,default:group::rwx,default:other:---,default:mask:rwx {} \;<br>

@@ Line 1: / Line 1: @@
 '''To set the default facl on a directory:'''<br>
-setfacl -m user::rwx,group::rwx,other:---,mask:rwx,default:user::rwx,default:group::rwx,default:other:---,default:mask:rwx <Directory name"<br>
+setfacl -m user::rwx,group::rwx,other:---,mask:rwx,default:user::rwx,default:group::rwx,default:other:---,default:mask:rwx <Directory name><br>
 This configures the directory to propage by inheritance any acls added to it for users<br><br>
 '''To add users to acls in a directory structure with inheritance''' all of the directories in the folder structure must have a "default acl" set. After cd'ing into the relevant directory run the following<br>
 find . -type d -exec setfacl -m user::rwx,group::rwx,other:---,mask:rwx,default:user::rwx,default:group::rwx,default:other:---,default:mask:rwx {} \;<br>