SUMMARY: RE: setfacl command under 2.5.1... (fwd)

From: The Hermit Hacker (scrappy@hub.org)
Date: Thu May 14 1998 - 13:14:33 CDT


The first answer I got was right, so figured I'd get this out before I
forget ...

Thanks...

---------- Forwarded message ----------
Date: Thu, 14 May 1998 14:04:55 -0400
From: "Adams, Chad M CRL" <cadams@crl02.crrel.usace.army.mil>
To: The Hermit Hacker <scrappy@hub.org>
Subject: RE: setfacl command under 2.5.1...

Your mask is set to --- which means anyone given permission via ACLs will
have effective permission of --- or none at all. Change the mask to rwx and
then do a getfacl again and you'll see that their effective acl is now rwx
as you desire.

Cheers!
        Chad

> ----------
> From: The Hermit Hacker[SMTP:scrappy@hub.org]
> Sent: Thursday, May 14, 1998 1:50 PM
> To: sun-managers@eecs.nwu.edu
> Subject: setfacl command under 2.5.1...
>
>
> Hi...
>
> I came across the setfacl command a little while back, and believe
> I'm missing something obvious in not being able to get it to work as I'm
> expecting.
>
> I created a directory called 'iitrc', that is to be shared between
> two students and a professor.
>
> Using setfacl, I did:
>
> setfacl -m user:<student1>:rwx iitrc
> setfacl -m user:<student2>:rwx iitrc
> setfacl -m user:<professor>:rwx iitrc
>
> And getfacl iitrc shows what I'm expecting:
>
> # file: iitrc
> # owner: root
> # group: other
> user::rwx
> user:024519w:rwx #effective:---
> user:marc:rwx #effective:---
> user:trudel:rwx #effective:---
> user:020408q:rwx #effective:---
> group::--- #effective:---
> mask:---
> other:---
>
> Now, as user 'marc', if I go into that directory and try to create
> a file, I get told:
>
> /loc/projects/iitrc> touch test
> touch: test cannot create
>
>
> Am I missing something stupod here? :( Or just misunderstanding
> how these acls shoudl work?
>
> Thanks...
>



This archive was generated by hypermail 2.1.2 : Fri Sep 28 2001 - 23:12:40 CDT