set acl failing....

[S.J. Sarwar]

Hi all,

I have a script which is run, by a user "esocron" , which tries to execute
"setacl -rn -m groups:xxxx:r-x files". These files are owned by an user "Oracle", and the group is "dba".

The script fails, alerting "Permission denied".
Is there anyway..I could enable this script which is run by "esocron" to "setacl" successfully.

PLease suggest.....

Thanks..
Sarwar.

[Jeff_Traigle]

Not directly. Only the file owner or root can change file permissions or control the ACL for a file. Two options come to mind immediately:

1. Make esocron the owner of the file. You can adjust the ACL to let Oracle and/or the dba group do what they need to do with it.

or

2. Set up sudo so esocron could perform the ACL modifications as Oracle without a password being supplied.

The second option is probably the cleaner of the two. Of course, it requires that sudo be installed whereas option 1 requires no additional software.

[SANTOSH S. MHASKAR]

Hi Sarwar,

Since esocron is not owner of files it cannot
do setacl on that file.

instead u first give write permission to esocron for
that file as owner oracle using setacl.
Then only u can do a setacl.

Alternately u can make esocron owner of those files.
Try this.