acledit question

[michael1212]

How can I give full access to a user "ben" to a directory structure /main (owner: root), recursively, without changing the ownership, etc.?

The following seems to only set the top directory:

acledit main

* ACL_type AIXC
*
attributes:
base permissions
owner(root): rw-
group(system): r--
others: r--
extended permissions
enabled
permit rwx u:ben

THANKS!

 

[khalidaaa]

Good Question michael!

we don't use the ACLs in our company so i only have the theory! I've been thru these documents (man pages) but i never found this mentioned any where!

http://www.ncsa.uiuc.edu/UserInfo/R...nfo/en_US/a_doc_lib/cmds/aixcmds1/acledit.htm

http://www.ncsa.uiuc.edu/UserInfo/R...sdev/access_control_list.htm#HDRAZ35JI1E4MART

IMHO I'm afraid that you might need to script this! (can be done using the find /main -print -exec acledit {})

Regards,
Khalid

 

[RodKnowlton]

I'd be wary of using ACLs.

Most anything you do with them will require scripting, including backing up and restoring files with ACLs attached (at least last time I looked into using them).

If you only need to have certain processes access the files when the user runs them, you might give sudo a look.

- Rod


IBM Certified Advanced Technical Expert pSeries and AIX 5L
CompTIA Linux+
CompTIA Security+

A Simple Code for Posting on the Web

 

[michael1212]

Thanks Rod,

I do make use of sudo. Will most probably decide against Extended ACLs, because any "chmod 755" , etc...will disable the extended attribs.

Thanks guys....
Michael