Arch Linux

pyther

Member

Registered: 2008-01-21

Posts: 1,395

Website

ACLs Masks + Group Permissions

I don't get this...

I applied setfacl -d -m mask:002 /home/http/pyther.net

pyther.net

# file: ../pyther.net/
# owner: pyther
# group: http
user::rwx
group::rwx
other::r-x
default:user::rwx
default:group::rwx        #effective:-w-
default:mask::-w-
default:other::r-x

drwxrwxr-x+ 16 pyther http 4096 2009-11-08 00:19 .

Create File

[pyther@mongo pyther.net]$ touch abc.txt

Permission of File

[pyther@mongo pyther.net]$ getfacl abc.txt 
# file: abc.txt
# owner: pyther
# group: users
user::rw-
group::rwx            #effective:-w-
mask::-w-
other::r--


-rw--w-r--+ 1 pyther users 0 2009-11-08 00:19 abc.txt

Why does getfacl show that the file has group permissions of 777?
I want the group to be able to read + write, but not execute the file. As far as I can tell the file isn't really executable.

Last edited by pyther (2009-11-08 05:24:32)

---

Website - Blog - arch-home
Arch User since March 2005

rine

Member

From: Germany

Registered: 2008-03-04

Posts: 217

Re: ACLs Masks + Group Permissions

The group permission is 777 because the directory has default:group::rwx. Effectively there are no read and execute rights because of the mask.
Set the default mask and default group to rwx and try again.

pyther

Member

Registered: 2008-01-21

Posts: 1,395

Website

Re: ACLs Masks + Group Permissions

Okay, I kinda get it thanks

I actually realized that default group will work and I don't need a umask.

---

Website - Blog - arch-home
Arch User since March 2005