Re: How to get an ACL exception report

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 03/21/05


Date: Mon, 21 Mar 2005 14:57:04 -0600

Dumpsec is a nifty free tool and it may be able to do what you want if you
check the options in the "permissions report options". Another tool to check
is fileacl. I don't know if it can do exactly what you want but it has a
myriad of options including a /noinherited switch for display mode. ---
Steve

http://www.systemtools.com/somarsoft/ -- Dumpsec
http://www.gbordier.com/gbtools/fileacl.htm -- Fileacl

<kenw@kmsi.net> wrote in message
news:5nvt31t921aheemkflp8f9027ibjv3vb88@4ax.com...
> I'm looking for a program that will summarize ACL settings on a directory
> structure. I'd be happy with an option to use with XCACLS * /T that
> showed
> only settings that are not inherited from a parent.
>
> If I'm checking the security of a filesystem, it's impractical to check
> the
> security of every single file -- and highly redundant, as most files
> simply
> inherit ACLs from the parent folder. Yet any tool I've found lists ACLs
> in
> excruciating detail, burying important differences in a mass of irrelevant
> inherited data.
>
> I'm sure such a tool exists somewhere. Heck, Novell had it years ago --
> but then, their security structure was more efficient (;-/2).
>
> /kenw
> Ken Wallewein
> K&M Systems Integration
> Phone (403)274-7848
> Fax (403)275-4535
> kenw@kmsi.net
> www.kmsi.net



Relevant Pages

  • Re: How to get an ACL exception report
    ... >> inherit ACLs from the parent folder. ... Yet any tool I've found lists ACLs ... >> Ken Wallewein ...
    (microsoft.public.win2000.security)
  • Re: Searching a commercial version of Dumpsec
    ... ACLs on files and registry keys. ... It does not yet dump the local security policy but it can be ... Searching a commercial version of Dumpsec ... Because we need a tool and support... ...
    (Security-Basics)
  • Re: OpenSUSE 10.2 & Samba Server - ACL inheritance not working?
    ... I've subscribed to the Samba ML and posed the same questions there. ... Unix permissions system. ... The ACLs are add-on, or so the ACL documentation on the suse website ... However, there's 2 inherit settings, one for ACLs and one ...
    (alt.os.linux.suse)
  • How to get an ACL exception report
    ... I'm looking for a program that will summarize ACL settings on a directory ... If I'm checking the security of a filesystem, ... inherit ACLs from the parent folder. ...
    (microsoft.public.win2000.security)
  • ACL question
    ... underneath that directory it will inherit the ACLs from the parent ... However subsequent file and directories created underneath the parent ... assume the default umask of the user, they don't seem to inherit the ...
    (Focus-SUN)