ACL (Access Control List) Question #2

ACL (Access Control List) Question #2

Post by Dan Sta » Fri, 25 Dec 1998 04:00:00



Hi,

Well I just ran into another problem with an ACL that I don't
understand, and I could not find an explaination in the documentation.
I started out with the following ACL for the file 'co_info.mdb':

        # getacl co_info.mdb
        # file: co_info.mdb
        # owner: stardan
        # group: other
        user::rwx
        user:lockmang:rw-
        user:starrick:rw-
        group::---
        class:rw-
        other:---

I then changed the group from 'other' to 'Info_Sys' by executing the
following command:

        # chgrp Info_Sys co_info.mdb

which resulted in the following ACL:

        # getacl co_info.mdb
        # file: co_info.mdb
        # owner: stardan
        # group: Info_Sys
        user::rwx
        user:lockmang:rw-
        user:starrick:rw-
        group::---
        class:rw-
        other:---

After I executed this command, lockmang could no longer write to the
file even though this user was still listed in the ACL as  having
read/write permissions.  I changed the group back to other and lockmang
could write to the file again.

        # getacl co_info.mdb
        # file: co_info.mdb
        # owner: stardan
        # group: other
        user::rwx
        user:lockmang:rw-
        user:starrick:rw-
        group::---
        class:rw-
        other:---

Looking at the permission bits confuses me further!

        -rwxrw----+   1 stardan  other        491520 Dec 24 10:50 co_info.mdb

The permission bits indicate that the group 'other' has read/write
permissions yet the ACL has the entry:

        group::---

which to me means that the group 'other' has no access.

Could someone please explain what is going on?  Or point me to source
where I can read more about how ACL's work as the UNIXware docs that I
am reading do not explain enough.

Regards,

Dan Star
UNIXware 7.01.1
VisionFS 2.01.911

 
 
 

1. ACL (access control list) howto list them?

Is there a way to list files having an ACL in every filesystems?

There are the commands:
    - ls -le         giving a '+' in column 11 if acl is defined
    - aclget      giving '

But, is there an option for command 'find' allowing to search for ACLs in
every fs?

2. IP Masquerading Linux to Linux

3. ACL (Access Control List) Security Question

4. What is "Socket Destroy Delayed"??

5. Access Control Lists (ACL) for Solaris 2.6?

6. remote access to sybase

7. ACL Access Control Lists ?

8. XF86Config for ET4000/W32

9. Access control list (ACL)

10. ACL's (Access Control Lists)

11. Specific Permissinon Control//Access Control List for Linux?

12. Access Control Lists (ACLs) and other questions

13. apache access control list question