ACL and write permission

[Dancho Penev]

On Mon, Oct 04, 2004 at 11:47:52AM +0500, Sergey Velikanov [UzPAK] wrote:
>Date: Mon, 4 Oct 2004 11:47:52 +0500
>From: "Sergey Velikanov [UzPAK]" <vgray at uzpak.uz>
>To: freebsd-questions <freebsd-questions at freebsd.org>
>Subject: ACL and write permission
>
>Hi again
>
>I can't add write permission via ACL
>
>mkdir /dir/docs 
>chown user:user /dir/docs 
>setfacl -n -dm u::rwx,g::rx,o::,u:user2:rwx,m::rwx /dir/docs 
>setfacl -m u:user2:rwx /dir/docs 
>chmod 750 /dir/docs 
>
>I create file in /dir/docs, but user2 have only read permission,

That's because when new file is creating file permissions are get
from directory's default ACL, and then they are mask with umask. The
entries, that are mask, are u::, m:: and o::, so if you have umask 022
(which is default) file's acl mask entry is set to "r". Robert Watson has
plan acl mask to override umask, but he doesn't realize that yet.

>getfacl says that #efective rights r--, how should i set ACL to
>/dir/docs if I want give write permission to user2
>
>
>Sergey Velikanov
>Technical  Division
>National Data Network "UzPAK"
>tel +(99871) 114-6326
>e-mail:  vgray at uzpak.uz
>http://www.uzpak.uz/
>
>
>_______________________________________________
>freebsd-questions at freebsd.org mailing list
>http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>To unsubscribe, send any mail to "freebsd-questions-unsubscribe at freebsd.org"
>

-- 
Dancho Penev

Home page:           http://www.mnet.bg/~dpenev
GnuGP public key:    http://www.mnet.bg/~dpenev/gnupg.asc
Key fingerprint:     E88D 8B7B 3EF6 E9C8 C5D2  7554 2AA8 C347 71A1 4277
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20041004/337bfc8d/attachment.bin