bugacl - Bugs: bug #42872, Cannot apply 'default' ACL...

 
 

bug #42872: Cannot apply 'default' ACL behavior to existing files

Submitted by:  Patrick Hemmer <phemmer>
Submitted on:  Tue 29 Jul 2014 02:49:41 PM UTC
 
Category:  Severity: 
Item Group:  Status: 
Privacy:  Assigned to: None
Open/Closed: Open
Summary:  *
* Mandatory Fields

Add a New Comment (Rich Markup)
   

Comment Type & Canned Response:
        No canned response available   (Or define a new Canned Response)

 

Tue 29 Jul 2014 02:49:41 PM UTC, original submission:  

It is currently impossible to apply an ACL to existing files that matches the result of new files created in a directory with a default ACL.

For example, the closest I can get is:

    $ umask 0000
    $ mkdir /tmp/test
    $ touch /tmp/test/a
    $ setfacl -R -d -m u:nobody:rwx /tmp/test
    $ setfacl -R -m u:nobody:rwX /tmp/test
    $ touch /tmp/test/b
    $ getfacl /tmp/test/{.,*}
    getfacl: Removing leading '/' from absolute path names
    # file: tmp/test/.
    # owner: phemmer
    # group: adm
    user::rwx
    user:nobody:rwx
    group::rwx
    mask::rwx
    other::rwx
    default:user::rwx
    default:user:nobody:rwx
    default:group::rwx
    default:mask::rwx
    default:other::rwx

   

    # file: tmp/test/a
    # owner: phemmer
    # group: adm
    user::rw-
    user:nobody:rw-
    group::rw-
    mask::rw-
    other::rw-

   

    # file: tmp/test/b
    # owner: phemmer
    # group: adm
    user::rw-
    user:nobody:rwx #effective:rw-
    group::rwx #effective:rw-
    mask::rw-
    other::rw-

While the effective permissions are the same, the actual permissions are not. The only reliable way I can think of to apply the default ACL to existing files would be to create a file in each directory, and use the resulting ACL from that file to apply on the existing files.

This behavior is observed with setfacl-2.2.51 & kernel-3.13.6

Patrick Hemmer <phemmer>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Search an item (to fill a dependency against):
   
Of     of  

Depends on the following items: None found

Items that depend on this one: None found

 

(Note: for Savannah users, you can use their login name rather than their email addresses.)


      

   

Carbon-Copy List
  • -email is unavailable- added by phemmer (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.


        / 100 remaining votes

     

     

     

     

    No changes have been made to this item

    Back to the top


    Powered by Savane 3.5