Access Control List on a directory (Solaris/Debian Linux)

From: David W Smith (dwsmith@well.ox.ac.uk)
Date: 05/24/02


Date: Fri, 24 May 2002 15:50:05 +0100 (BST)
From: David W Smith <dwsmith@well.ox.ac.uk>
To: security-basics@securityfocus.com

Hi,

I'm wanting to set up an ACL for a directory (accessible by members
of a specfic group) on an NFS file-system accessible from Solaris 8 and
Debian Linux platforms. Does anyone know if it's possible to use ACL's
with NIS (though I'm aware that what I want to achieve might not need this
functionality)? What I have come up with so far is (the permissions as
are can be ignored):

setfacl -s u::7,g::7,o:4,m:5,d:u::5,d:g::7,d:o:5,d:m:5 'directory'

- then set a default acl for the group's directory:

setfacl -m d:g:groupname:7 'directory'

Thanks for any advice.

David Smith

University of Oxford



Relevant Pages

  • Re: Tough Q: Anyone running the Linux AllegroCL IDE on Sun OS?
    ... I am told Sun OS has a Linux emuation mode... ... There is actually an ACL for Solaris - see the Product Page for ACL - ...
    (comp.lang.lisp)
  • Re: ACL-s in Solaris 10
    ... > some production machines with Solaris 9. ... I'm guessing the mask is being interpreted as r--, ... at least then you'll have an ACL mask and will get more sensible behaviour. ... That's right - that's what the ACL you've got there enforces. ...
    (comp.unix.solaris)
  • [patch] nfsacl: Solaris VxFS compatibility fix
    ... here is a compatibility fix between Linux and Solaris when used with VxFS filesystems: ... usually accepts acl entries in any order, but with VxFS it replies with NFSERR_INVAL when it ... sees a four-entry acl that is not in canonical form. ...
    (Linux-Kernel)
  • Re: ACLs with ZFS/NFSv4
    ... Which Solaris release is this? ... You probably want the ACL passthrough behavior in a current SXCE ... review the ACL inheritance and examples in the ZFS Admin Guide, ...
    (comp.unix.solaris)
  • Re: WordNet and Common Lisp: Any good implementation & API?
    ... The code at the link was written by Dan Tecuci. ... It is an adaptation ... of Nahabedian's code to run on ACL and Solaris. ...
    (comp.lang.lisp)