LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 08-09-2012, 01:36 AM   #1
phatrik
LQ Newbie
 
Registered: Sep 2010
Location: Toronto, ON
Distribution: CentOS
Posts: 18

Rep: Reputation: 0
ACLs / "acl" option when mounting filesystems


I'm wondering what's the point of mounting a filesystem with the ACL option? Here's a scenario I tested out:


The file system on which this test is being carried on is NOT mounted with the ACL option.

I changed the file's permissions so everyone could read it:

Code:
chmod 744 testfile
I confirmed testuser could read the file. I logged in on a different console as testuser and read the file contents with "cat"


Switched to the previous console, applied an ACL so that testuser couldn't read said file:

Code:
setfacl -m user:testuser:---
Switched to the other console where testuser was logged in and confirmed he couldn't read the file anymore



All of this to say, the fs wasn't mounted with the "ACL" option and yet, it seems like they still apply. I looked at the manpage for mount and it reads "Support POSIX Access Control Lists (or not)". So what's the point?
 
Old 08-09-2012, 02:29 AM   #2
EricTRA
LQ Guru
 
Registered: May 2009
Location: Gibraltar, Gibraltar
Distribution: Fedora 20 with Awesome WM
Posts: 6,805
Blog Entries: 1

Rep: Reputation: 1297Reputation: 1297Reputation: 1297Reputation: 1297Reputation: 1297Reputation: 1297Reputation: 1297Reputation: 1297Reputation: 1297
Hi,

If I'm not mistaking it depends on the file system you're using, which you didn't mention. Several file systems come with ACL enabled by default (for example ext4), so there's no need to specify acl as mount option. If you use a distinct file system type (nfs, reiserfs, ...) then you might need to specify however. Check what file system you're using and if it has ACL enabled by default.

Kind regards,

Eric
 
1 members found this post helpful.
Old 08-09-2012, 02:55 AM   #3
phatrik
LQ Newbie
 
Registered: Sep 2010
Location: Toronto, ON
Distribution: CentOS
Posts: 18

Original Poster
Rep: Reputation: 0
The filesystem is indeed EXT4. That explains it, thanks.


Quote:
Originally Posted by EricTRA View Post
Hi,

If I'm not mistaking it depends on the file system you're using, which you didn't mention. Several file systems come with ACL enabled by default (for example ext4), so there's no need to specify acl as mount option. If you use a distinct file system type (nfs, reiserfs, ...) then you might need to specify however. Check what file system you're using and if it has ACL enabled by default.

Kind regards,

Eric
 
Old 08-09-2012, 02:57 AM   #4
EricTRA
LQ Guru
 
Registered: May 2009
Location: Gibraltar, Gibraltar
Distribution: Fedora 20 with Awesome WM
Posts: 6,805
Blog Entries: 1

Rep: Reputation: 1297Reputation: 1297Reputation: 1297Reputation: 1297Reputation: 1297Reputation: 1297Reputation: 1297Reputation: 1297Reputation: 1297
Hi,

You're welcome. Thanks for marking the thread solved.

Kind regards,

Eric
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
unpredictable "delete" "move to trash" or "cut" file menu option dorianrenato Linux - General 3 11-28-2011 06:41 PM
Boot stops on "Mounting NFS filesystems:" for a LONG time funkymunky Fedora 1 09-12-2008 12:43 AM
Explanation of the "loop" option when mounting CD image files uncle-c Linux - Newbie 5 12-15-2007 11:16 AM
External USB HDD"Mounting local filesystems: /dev/sdb1 is not a valid block device" manudath Linux - Hardware 3 12-13-2004 09:59 PM
RH 9.0 freezes on "mounting other filesystems: " rainmann Red Hat 9 02-04-2004 04:59 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 01:33 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration