Re: How to get an ACL exception report

kenw_at_kmsi.net
Date: 03/23/05

  • Next message: Steven L Umbach: "Re: Event ID 538 Logon Type 3 NT AUTHORITY/ANONYMOUS LOGON"
    Date: Wed, 23 Mar 2005 01:29:13 GMT
    
    

    Those are great! Thanks!

    They're still a little verbose, displaying redundant information, but a lot
    better than the Microsoft blunt instruments.

    /kenw

    "Steven L Umbach" <n9rou@nospam-comcast.net> wrote:

    >Dumpsec is a nifty free tool and it may be able to do what you want if you
    >check the options in the "permissions report options". Another tool to check
    >is fileacl. I don't know if it can do exactly what you want but it has a
    >myriad of options including a /noinherited switch for display mode. ---
    >Steve
    >
    >http://www.systemtools.com/somarsoft/ -- Dumpsec
    >http://www.gbordier.com/gbtools/fileacl.htm -- Fileacl
    >
    ><kenw@kmsi.net> wrote in message
    >news:5nvt31t921aheemkflp8f9027ibjv3vb88@4ax.com...
    >> I'm looking for a program that will summarize ACL settings on a directory
    >> structure. I'd be happy with an option to use with XCACLS * /T that
    >> showed
    >> only settings that are not inherited from a parent.
    >>
    >> If I'm checking the security of a filesystem, it's impractical to check
    >> the
    >> security of every single file -- and highly redundant, as most files
    >> simply
    >> inherit ACLs from the parent folder. Yet any tool I've found lists ACLs
    >> in
    >> excruciating detail, burying important differences in a mass of irrelevant
    >> inherited data.
    >>
    >> I'm sure such a tool exists somewhere. Heck, Novell had it years ago --
    >> but then, their security structure was more efficient (;-/2).
    >>
    >> /kenw
    >> Ken Wallewein
    >> K&M Systems Integration
    >> Phone (403)274-7848
    >> Fax (403)275-4535
    >> kenw@kmsi.net
    >> www.kmsi.net
    >

    Ken Wallewein
    K&M Systems Integration
    Phone (403)274-7848
    Fax (403)275-4535
    kenw@kmsi.net
    www.kmsi.net


  • Next message: Steven L Umbach: "Re: Event ID 538 Logon Type 3 NT AUTHORITY/ANONYMOUS LOGON"

    Relevant Pages

    • Re: How to get an ACL exception report
      ... Dumpsec is a nifty free tool and it may be able to do what you want if you ... > inherit ACLs from the parent folder. ... Yet any tool I've found lists ACLs ...
      (microsoft.public.win2000.security)
    • Re: OpenSUSE 10.2 & Samba Server - ACL inheritance not working?
      ... I've subscribed to the Samba ML and posed the same questions there. ... Unix permissions system. ... The ACLs are add-on, or so the ACL documentation on the suse website ... However, there's 2 inherit settings, one for ACLs and one ...
      (alt.os.linux.suse)
    • How to get an ACL exception report
      ... I'm looking for a program that will summarize ACL settings on a directory ... If I'm checking the security of a filesystem, ... inherit ACLs from the parent folder. ...
      (microsoft.public.win2000.security)
    • ACL question
      ... underneath that directory it will inherit the ACLs from the parent ... However subsequent file and directories created underneath the parent ... assume the default umask of the user, they don't seem to inherit the ...
      (Focus-SUN)
    • Re: Time Machine questions
      ... I have discovered that Time Machine does not preserve or restore ... some kinds of metadata, such as ACLs that have been inherited from a ... parent folder. ... of inherited ACLs (my iMovie projects and iTunes and iPhoto libraries, ...
      (comp.sys.mac.apps)