Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 21 Feb 2008 10:21:40 +0200
From:      Andrei Kolu <antik@bsd.ee>
To:        freebsd-fs@freebsd.org
Subject:   Re: FreeBSD 6.3 ACL problem
Message-ID:  <200802211021.41060.antik@bsd.ee>
In-Reply-To: <20080221081511.GA12457@harmless.hu>
References:  <200802210957.13651.antik@bsd.ee> <20080221081511.GA12457@harmless.hu>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thursday 21 February 2008 10:15:11 Gergely CZUCZY wrote:
> run ``id antik'' please. I've got a feeling that your antik user is
> part of the "wheel" group, which is not allowed to chdir into that
> directory.
>
sambatest# id antik
uid=1001(antik) gid=1001(antik) groups=1001(antik),0(wheel)

I should remove this user from wheel group or add particular permission? So 
wheel does not fit onto "other" definition in ACL? 

> On Thu, Feb 21, 2008 at 09:57:13AM +0200, Andrei Kolu wrote:
> > Hi, I have this strange problem with ACL- I can go to one particular
> > directory with two different users but can't access it with third. NOTE:
> > there is no common group set up like samba- all users access this
> > directory according to ACL rules (other::r-x). Looks like different shell
> > does not matter (csh or sh). Only difference whas that I created user
> > "antik" before I enabled ACL support for /usr filesystem. Should I report
> > this like bug?
> >
> > Commands listing:
> > ---------------------------------------------------------------------
> > sambatest# pwd
> > /root
> > sambatest# cd /home/
> > sambatest# ll
> > total 10
> > drwxr-xr-x  2 antik  antik  512 Feb 20 16:23 antik
> > drwxrwxr-x+ 3 samba  samba  512 Feb 20 15:53 samba
> > drwxr-xr-x  2 test1  test1  512 Feb 21 09:29 test1
> > drwxr-xr-x  2 test2  test2  512 Feb 20 16:40 test2
> > sambatest# getfacl samba/
> > #file:samba/
> > #owner:1003
> > #group:1003
> > user::rwx
> > user:nobody:rw-
> > group::r-x
> > group:wheel:rw-
> > mask::rwx
> > other::r-x
> > sambatest# su - antik
> > %cd /home/
> > %ll
> > total 10
> > drwxr-xr-x  2 antik  antik  512 Feb 20 16:23 antik
> > drwxrwxr-x+ 3 samba  samba  512 Feb 20 15:53 samba
> > drwxr-xr-x  2 test1  test1  512 Feb 21 09:29 test1
> > drwxr-xr-x  2 test2  test2  512 Feb 20 16:40 test2
> > %cd samba/
> > samba/: Permission denied.
> > %logout
> > sambatest# su - test2
> > $ cd /home
> > $ ll
> > total 14
> > drwxr-xr-x   6 root   wheel  - 512 Feb 20 16:40 ./
> > drwxr-xr-x  17 root   wheel  - 512 Feb 20 14:01 ../
> > drwxr-xr-x   2 antik  antik  - 512 Feb 20 16:23 antik/
> > drwxrwxr-x+  3 samba  samba  - 512 Feb 20 15:53 samba/
> > drwxr-xr-x   2 test1  test1  - 512 Feb 21 09:29 test1/
> > drwxr-xr-x   2 test2  test2  - 512 Feb 20 16:40 test2/
> > $ cd samba
> > $ pwd
> > /home/samba
> > ---------------------------------------------------------------------
> > _______________________________________________
> > freebsd-fs@freebsd.org mailing list
> > http://lists.freebsd.org/mailman/listinfo/freebsd-fs
> > To unsubscribe, send any mail to "freebsd-fs-unsubscribe@freebsd.org"
>
> Sincerely,
>
> Gergely Czuczy,
> Harmless Digital
> mailto: gergely.czuczy@harmless.hu





Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200802211021.41060.antik>