Arch Linux

Artyom

Member

Registered: 2017-03-27

Posts: 70

Need help about advanced files/directory access permissions

Hi,

I am trying to set up an emby server on my own.
It works just fine excepts for some write access issue.
I store all my media in my user home folder "Videos", and gave the ownership and write access to "media" group wich is used by emby.
But, all newly created file still don't have the wanted permission, even if i try with default ACL.

What I want in final is:
The emby group "media" to have access (777) on the "Video" directory and all children. Even newly created file or moved in by me.

What is the best way to achieve this?

WorMzy

Administrator

From: Scotland

Registered: 2010-06-16

Posts: 13,643

Website

Re: Need help about advanced files/directory access permissions

Why does the server need write access? Please post the ACLs you have set.

---

Sakura:-
Mobo: MSI MAG X570S TORPEDO MAX // Processor: AMD Ryzen 9 5950X @4.9GHz // GFX: AMD Radeon RX 5700 XT // RAM: 32GB (4x 8GB) Corsair DDR4 (@ 3000MHz) // Storage: 1x 3TB HDD, 6x 1TB SSD, 2x 120GB SSD, 1x 275GB M2 SSD

Making lemonade from lemons since 2015.

Artyom

Member

Registered: 2017-03-27

Posts: 70

Re: Need help about advanced files/directory access permissions

The server need write access to write some metadata and add movie posters alongside the video file.
I start to experience issues when I wanted to modify posters from the emby client because emby can create new poster but have no right to modify them after.
So to not over complexify the permission I just decided to give full access to the server over the directory and children.
Here is the actual ACL on the parent direcotry:

❯ getfacl Vidéos
# file: Vidéos
# owner: artyom
# group: media
# flags: -s-
user::rwx
group::rwx
other::r-x
default:user::rwx
default:group::rwx
default:other::r-x

Here is the ACL from a test file created with "touch" in the directory "Vidéos":

❯ getfacl test
# file: test
# owner: artyom
# group: media
user::rw-
group::rw-
other::r--

As you can see, the result at this time only lack the execution right on created file.

Here is the ACL of a test file created in "Downloads" and moved in "Videos" with "mv":

❯ getfacl test
# file: test
# owner: artyom
# group: artyom
user::rw-
group::r--
other::r--

In this case "media" group have no access other than read.

My goal is to have "media" group have rwx rights on newly created and moved in files and directories and this recursively.

Last edited by Artyom (2020-12-27 14:43:25)