bugacl - Bugs: bug #42872, Cannot apply 'default' ACL...

 
 

bug #42872: Cannot apply 'default' ACL behavior to existing files

Submitted by:  Patrick Hemmer <phemmer>
Submitted on:  Tue 29 Jul 2014 02:49:41 PM UTC  
 
Category: NoneSeverity: 3 - Normal
Item Group: NoneStatus: None
Privacy: PublicAssigned to: None
Open/Closed: Open

Add a New Comment(Rich Markup)
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Tue 29 Jul 2014 02:49:41 PM UTC, original submission:

It is currently impossible to apply an ACL to existing files that matches the result of new files created in a directory with a default ACL.

For example, the closest I can get is:

$ umask 0000
$ mkdir /tmp/test
$ touch /tmp/test/a
$ setfacl -R -d -m u:nobody:rwx /tmp/test
$ setfacl -R -m u:nobody:rwX /tmp/test
$ touch /tmp/test/b
$ getfacl /tmp/test/{.,*}
getfacl: Removing leading '/' from absolute path names
# file: tmp/test/.
# owner: phemmer
# group: adm
user::rwx
user:nobody:rwx
group::rwx
mask::rwx
other::rwx
default:user::rwx
default:user:nobody:rwx
default:group::rwx
default:mask::rwx
default:other::rwx

# file: tmp/test/a
# owner: phemmer
# group: adm
user::rw-
user:nobody:rw-
group::rw-
mask::rw-
other::rw-

# file: tmp/test/b
# owner: phemmer
# group: adm
user::rw-
user:nobody:rwx #effective:rw-
group::rwx #effective:rw-
mask::rw-
other::rw-

While the effective permissions are the same, the actual permissions are not. The only reliable way I can think of to apply the default ACL to existing files would be to create a file in each directory, and use the resulting ACL from that file to apply on the existing files.

This behavior is observed with setfacl-2.2.51 & kernel-3.13.6

Patrick Hemmer <phemmer>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by phemmer (Submitted the item)
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    No Changes Have Been Made to This Item

    Back to the top


    Powered by Savane 3.1-cleanup1