Contents
When do I need to set an ACL on a file?
When setting up an ACL for a user access on a file or directory that is several layer deep in the directory structure, a “READ-EXECUTE” ACL will need to be set on all levels above the file or directory you are sharing.
Is it possible to have one default ACLs for all Dirs?
It is not possible to have files have one default and dirs have a different default. You could run a script out of cron that does a setfacl on all the dirs every minute – though that is less then ideal of a solution. This post on ACLs and Masks really helped me to understand how to do what I wanted, and why.
What are the permissions to use in ACLS?
The simplest permissions to use in ACLs are R for read access, W for write access, and X for execute and directory access. These are shortcuts for more fine-grained settings and for a good, detailed description of the fine-grained permissions that can be set, please see https://www.osc.edu/book/export/html/4523
How to set default ACL control folders in Linux?
If it still bothers you, the only choice is to put your ACL controlled folders on a file system mounted with no execute option. -d (or –default) is used to set the defaults on the directory so that things created in it inherit the perms (as you seem to be doing). It is not possible to have files have one default and dirs have a different default.
What are the permissions you can grant in ACLS?
With ACLs you can grant either read-only access, or read-write access on a directory or file to specific users. The simplest permissions to use in ACLs are R for read access, W for write access, and X for execute and directory access.
How to grant read only access to a file?
The “nfs4_getfacl” command will display current ACL setting for a file or directory, and the “nfs4_setfacl” command is used to modify ACLs. With ACLs you can grant either read-only access, or read-write access on a directory or file to specific users.
How do I set a group ACL in NFS4?
To set a Group ACL, you need to add the “g” option to the “nfs4_getfacl” command. To set a Group Inherited ACL, you need to add the “gfdi” option to the “nfs4_getfacl” command. With this inherited group ACL set, all new files and directories will inherit the group settings.