Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Mike Lewis on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Problems regarding default ALCs

Status
Not open for further replies.

mdet

Technical User
Jun 11, 2001
53
0
0
DE
Hi there,
on our Systems running Solaris 8 we experience strange behaviour regarding default ACLs.
For some directories having default ACLs creating a file yields correct ACL settings on others it won't.

See this example:

# file: dir1
# owner: john
# group: group1
user::rwx
group::rwx #effective:rwx
group:dba:r-x #effective:r-x
mask:rwx
other:---
default:user::rwx
default:group::rwx
default:group:dba:r--
default:mask:rwx
default:eek:ther:---

# file: dir2
# owner: john
# group: group1
user::rwx
group::rwx #effective:rwx
group:dba:r-x #effective:r-x
mask:rwx
other:---
default:user::rwx
default:group::rwx
default:group:dba:r--
default:mask:rwx
default:eek:ther:---

As you can see both directories have the same ACL settings (output of "getfacl")

Now as user "john" I'm creating files in both of these directories.
$touch ./dir1/testFile
$touch ./dir2/testFile

This is the puzzling result:

# file: dir1/testFile
# owner: john
# group: group1
user::rw-
group::rwx #effective:rw-
group:dba:r-- #effective:r--
mask:rw-
other:---

# file: dir2/testFile
# owner: john
# group: group1
user::rw-
group::rwx #effective:---
group:dba:r-- #effective:---
mask:---
other:---

In the second case the "mask" entry mutated to "---" thus the effective settings for "group" and "group:dba" are masked the appropriate way.

I tried to avoid the mask setting but if you set any of those default ACLs you have to specify all of them.

Any hint is well appreciated.
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top