topic Re: Is it bug in ACL on Filesystem RHEL5 ? in Operating System - Linux

Is it bug in ACL on Filesystem RHEL5 ?

monu_1 — Wed, 12 Dec 2007 07:58:27 GMT

Hi all,

I am using RHEL5 and confused with below=>

ACL applied default in RHEL5 and i am login as root.
I just make a folder in / with 777 permission
lets say /chapter5 and touch /chapter5/f1
Now applied ACL on f1 to rwx by user nh1
# setfacl -m u:nh1:rwx f1
when i login as nh1 it's working.
But prob is that when I login as another user like nh2 and write forcefully on f1, why acl giving permission to write on f1?
and most interesting now it has changed file and group ownership of f1 to nh2.

pls suggest.
Thanks in advanced.
MKS

Re: Is it bug in ACL on Filesystem RHEL5 ?

palaniappan.sp — Wed, 12 Dec 2007 10:21:06 GMT

Hi,
What is the default umask?? in ur m/c.
Did u tried by giving permission to the file /chapter5/f1 (using chiown and chmod) in the normal way?? If it work ing as per requirement.
Then ur filesystem might not support setfacl??
For Further clarification pls see the man page of setfacl
http://linuxcommand.org/man_pages/setfacl1.html

I hope this link will help u to get..

Regds
Palani

Re: Is it bug in ACL on Filesystem RHEL5 ?

monu_1 — Wed, 12 Dec 2007 11:17:49 GMT

hi Palani

default umak is 0022
I am not changing any default permission in /chapter5/f1
ls -la f1
-rw-r--r-- 1 root root 57 Dec 12 16:33 f1

MKS

Re: Is it bug in ACL on Filesystem RHEL5 ?

Ivan Ferreira — Wed, 12 Dec 2007 15:08:10 GMT

>> But prob is that when I login as another user like nh2 and write forcefully on f1, why acl giving permission to write on f1?

I think that you are not writing to the file, you are replacing the file, for example, with a redirection. This will be allowed as the parent directory has 777 and that is why the ownership changed.

Remove 777 permissions to the parent directory and try to "modify" the file as nh2 instead of replace the files.

Re: Is it bug in ACL on Filesystem RHEL5 ?

Stuart Browne — Wed, 12 Dec 2007 19:36:48 GMT

Are you using ACL's? From what you've said here so far, you're just using standard permissions and file modes.

If you are using extended permissions, please show us the output of 'getfacl -R /chapter5' (assuming 'f1' is the only file is in there).

Re: Is it bug in ACL on Filesystem RHEL5 ?

monu_1 — Thu, 13 Dec 2007 10:56:08 GMT

Thanks all,

I got the answer. i have changed 777 permission /chapter5 to 701 and now set ACL on /chapter5 and f1.It's working now.

Thanks,
MKS