Differences between version 11 and predecessor to the previous major change of AccessControlLists.
Other diffs: Previous Revision, Previous Author, or view the Annotated Edit History
| Newer page: | version 11 | Last edited on Thursday, September 30, 2004 8:52:59 am | by JohnMcPherson | Revert |
| Older page: | version 9 | Last edited on Friday, December 5, 2003 8:37:46 am | by JohnMcPherson | Revert |
@@ -16,9 +16,11 @@
* Having a patched kernel to allow it (get the 2.4 patch from http://acl.bestbits.at/ or run [LinuxKernel2.6])
* Having the ACL utilities
* Having a slightly modified version of fileutils.
-It is also important to have a recent version of e2fsck otherwise it'll screw up your ACLs. (This is in the "
e2fsprogs"
package in Debian.)
+It is also important to have a recent version of e2fsck otherwise it'll screw up your ACLs. (This is in the [
e2fsprogs|http://packages.qa.debian.org/e/e2fsprogs.html]
package in Debian. The current version in woody (1.27-2) __is too old__! The solution to this is to use the backports for woody - add
+ deb http://www.backports.org/debian woody kernel-2.6
+to your /etc/apt/sources.list
.)
!!Kernel bits
Now!
With the patched kernel, the appropriate options are (in menuconfig):
@@ -31,9 +33,9 @@
I don't know how this works for other fs' (JFS, XFS) so someone else can wiki that :)
!!ACL utilities
-The basic ACL utilities you will want are `getfacl' and `setfacl'. If you havn't already got them, you can get them from http://acl.bestbits.at/ . On Gentoo they are in the package `
sys-apps/acl'
. I think it is
in package `
acl' on Debian
. Debian also has an `acl-dev' which contains the libraries and headers and such.
+The basic ACL utilities you will want are `getfacl' and `setfacl'. If you havn't already got them, you can get them from http://acl.bestbits.at/ . On Gentoo they are in the package [
sys-apps/acl|http://packages
.gentoo.org/packages/?category=sys-apps;name=acl]
in Debian they are in the
package [
acl|http://packages.qa.debian.org/a/acl.html]
. Debian also has an `acl-dev' which contains the libraries and headers and such.
!!How to use this stuff
Right! Onto the juicy stuff. First off, you need to make sure your ext2/3 partitions are mounted with the `acl' option. If they aren't, you will get this:
@@ -44,12 +46,24 @@
!!!ACL Basics
An ACL for use with the command line looks like [[gu]:<group|user>:perms.
-So, to give group `techies' rwx access to /techies
, you would type:
- setfacl -m g:techies:rwx /techies
+So, to give group `techies' rwx access to /techie_folder
, you would type:
+ setfacl -m g:techies:rwx /techie_folder
+To see the results:
+ getfacl /techie_folder
+You'll get something like this:
+!# file: techie_folder%%%
+!# owner: root%%%
+!# group: staff%%%
+user::rwx%%%
+group::r-x%%%
+__group:
techies:rwx__%%%
+mask::rwx%%%
+other::r-x%%%
The -m just means you are modifying the ACL directly from the command line, as opposed to from stdin later. man setfacl reveals all!
+%%%Additional informations can be found in the [man pages|http://acl.bestbits.at/man/man.shtml] or in this [article|http://www.linux-mag.com/2003-09/acls_01.html].
!!!ACL's with Samba
Samba 3 supports using libacl to support full ACL access to Samba shares. You need to ensure it's compiled into Samba (it probably is) and install libacl. Then it seems like you don't have to do anything more. See http://www.bluelightning.org/linux/samba_acl_howto/ for a small howto.
