Difference between revisions of "Access Control Lists"

From MyWiki
Jump to: navigation, search
Line 1: Line 1:
 
'''To set the default facl on a directory:'''<br>
 
'''To set the default facl on a directory:'''<br>
 
setfacl -m user::rwx,group::rwx,other:---,mask:rwx,default:user::rwx,default:group::rwx,default:other:---,default:mask:rwx <Directory name><br>
 
setfacl -m user::rwx,group::rwx,other:---,mask:rwx,default:user::rwx,default:group::rwx,default:other:---,default:mask:rwx <Directory name><br>
This configures the directory to propage by inheritance any acls added to it for users<br><br>
+
This configures the directory to propagate by inheritance any acls added to it for users<br><br>
 
'''To add users to acls in a directory structure with inheritance''' all of the directories in the folder structure must have a "default acl" set. After cd'ing into the relevant directory run the following<br>
 
'''To add users to acls in a directory structure with inheritance''' all of the directories in the folder structure must have a "default acl" set. After cd'ing into the relevant directory run the following<br>
 
find . -type d -exec setfacl -m user::rwx,group::rwx,other:---,mask:rwx,default:user::rwx,default:group::rwx,default:other:---,default:mask:rwx {} \;<br>
 
find . -type d -exec setfacl -m user::rwx,group::rwx,other:---,mask:rwx,default:user::rwx,default:group::rwx,default:other:---,default:mask:rwx {} \;<br>

Revision as of 09:53, 23 July 2014

To set the default facl on a directory:
setfacl -m user::rwx,group::rwx,other:---,mask:rwx,default:user::rwx,default:group::rwx,default:other:---,default:mask:rwx <Directory name>
This configures the directory to propagate by inheritance any acls added to it for users

To add users to acls in a directory structure with inheritance all of the directories in the folder structure must have a "default acl" set. After cd'ing into the relevant directory run the following
find . -type d -exec setfacl -m user::rwx,group::rwx,other:---,mask:rwx,default:user::rwx,default:group::rwx,default:other:---,default:mask:rwx {} \;