Friday, May 25, 2012

Enabling ACL in /etc/fstab

I wish to set FACL for a file-system "/ua1003" with Read-Write permission for my user-account 'ashok'. When I try to do it, I noticed the file-system isn't mounted with ACL feature enabled. I have added the 'acl' option in /etc/fstab for that mount point and did a remount. After that, I was able to set the FACL. Below shown is the sequence which I did to make the ACL work:

[root@hostxyz ua1003]# setfacl -m u:ashok:rwx /ua1003                          
setfacl: /ua1003: Operation not supported                                                  <-- ACL not enabled
[ashok@hostxyz /]$ grep /ua1003 /etc/fstab
LABEL=/ua1003           /ua1003                   ext3    defaults        0  0        
[ashok@hostxyz /]$ vi /etc/fstab
[root@hostxyz ~]# grep /ua1003 /etc/fstab
LABEL=/ua1003           /ua1003                   ext3    defaults,acl        0  0   <-- Enabled ACL feature in /etc/fstab
[root@hostxyz ~]# mount -o remount /ua1003                                           <-- Remounting /ua1003
[root@hostxyz ~]# setfacl -m u:ashok:rwx /ua1003                                    <-- Setting FACL to the parent folder
[root@hostxyz ~]# getfacl /ua1003
getfacl: Removing leading '/' from absolute path names
# file: ua1003
# owner: applprod
# group: dba
user::rwx
user:ashok:rwx
group::r-x
mask::rwx
other::r-x
[root@hostxyz ~]# setfacl -R -m u:ashok:rwx /ua1003                               <--Setting FACL recursively
[root@hostxyz ~]# getfacl /ua1003
getfacl: Removing leading '/' from absolute path names
# file: ua1003
# owner: applprod
# group: dba
user::rwx
user:ashok:rwx
group::r-x
mask::rwx
other::r-x
[root@hostxyz ~/#

PS: To check if ACL is enabled on a given file-system, execute 'tune2fs -l <devicename>' command and look out for "Default mount options".

27 comments:

  1. I am curious to find out what blog platform you're using? I'm experiencing some minor security problems with my latest website and I'd like to find something more safeguarded. Do you have any solutions?

    Visit my website: http://Www.Israelconnection.de/blogs/user/VerlaUCU

    ReplyDelete
  2. Awesome post.

    Also visit my blog; a scholarships

    ReplyDelete
  3. Thanks for finally talking about > "Enabling ACL in /etc/fstab" < Liked it!

    Here is my page click Here

    ReplyDelete
  4. Hi, I think your website might be having web browser
    compatibility issues. Whenever I look at your website in Safari,
    it looks fine however, if opening in Internet Explorer, it's got some overlapping issues. I merely wanted to provide you with a quick heads up! Aside from that, wonderful site!

    My weblog ... visit website

    ReplyDelete
  5. Heya i'm for the first time here. I came across this board and I to find It really useful & it helped me out much. I am hoping to give one thing back and aid others like you aided me.

    Look at my homepage - http://skippyarticles.com/Porn-Photos-Have-In-Todays-Society.html

    ReplyDelete
  6. I have read so many articles about the blogger lovers but this paragraph is really a good post, keep it up.


    Feel free to surf to my webpage ... see more

    ReplyDelete
  7. When I initially left a comment I seem to have clicked the -Notify me when new comments are added- checkbox and from now on
    each time a comment is added I receive four emails
    with the same comment. There has to be a means you can remove me from that service?
    Appreciate it!

    Also visit my blog click here

    ReplyDelete
  8. When I initially left a comment I seem to have clicked the -Notify
    me when new comments are added- checkbox and from now on each time a comment is added I receive four emails with the same comment.
    There has to be a means you can remove me from that service?
    Appreciate it!

    Feel free to visit my weblog - click here
    My website - visit website

    ReplyDelete
  9. I do agree with all of the concepts you've introduced to your post. They're very convincing and will certainly work.

    Still, the posts are too quick for starters. May just you please
    lengthen them a bit from subsequent time? Thank you for the post.


    Also visit my web page ... Hugedd.com
    My webpage > Website

    ReplyDelete
  10. Your style is unique in comparison to other folks I have read stuff from.

    I appreciate you for posting when you have the opportunity, Guess I'll just bookmark this site.

    Also visit my blog :: sources
    My web page: was klassnaya - chatclimax.com

    ReplyDelete
  11. I'm really enjoying the design and layout of your site. It's a very easy on the eyes which makes it much
    more pleasant for me to come here and visit more often. Did
    you hire out a designer to create your theme? Excellent work!


    my web-site; visit website
    Also see my web site: http://sororityorgy.org

    ReplyDelete
  12. Very nice post. I just stumbled upon your weblog and
    wanted to mention that I have truly loved browsing your
    blog posts. After all I'll be subscribing in your feed and I hope you write again very soon!

    Here is my weblog - the Pretty Babe Nikki Takes Off Her Clothes Exposing Her Tits And Sweet Pussy

    ReplyDelete
  13. Keep on writing, great job!

    Look at my web-site - http://hugedds.com/index.php?own=2181629

    ReplyDelete
  14. When I initially commented I clicked the "Notify me when new comments are added" checkbox
    and now each time a comment is added I get four e-mails with the same comment.
    Is there any way you can remove me from that service?
    Thanks!

    Feel free to surf to my web page; with Two Hot Euro Girls Take It Doble Penatration Hot Blond And One Fine Ass

    ReplyDelete
  15. It's going to be finish of mine day, but before finish I am reading this wonderful piece of writing to increase my knowledge.

    my homepage pussy stuffing and watercan play with amia moretti 3272012 - pornharvest.com

    ReplyDelete
  16. I always used to study paragraph in news papers but now
    as I am a user of net therefore from now I am using net for content, thanks to web.


    My page - from Hard Fucked

    ReplyDelete
  17. I used to be suggested this website by my cousin. I am now not certain whether this publish is
    written by him as no one else know such specified about my difficulty.
    You are amazing! Thank you!

    my page ... View Results

    ReplyDelete
  18. I am regular reader, how are you everybody? This article posted at this website is actually pleasant.


    Look into my site ... HTTP://roughteenanal.com/index.php?own=2136555

    ReplyDelete
  19. you are really a excellent webmaster. The site
    loading pace is incredible. It seems that you are doing any distinctive trick.
    Furthermore, The contents are masterpiece.

    you have performed a great process on this
    topic!

    Feel free to surf to my web page ... more

    ReplyDelete
  20. I am in fact delighted to glance at this web site posts which contains plenty of helpful data, thanks for providing
    these statistics.

    Here is my web page - http://vintagevideos.net

    ReplyDelete
  21. Fantastic beat ! I would like to apprentice whilst
    you amend your site, how can i subscribe for a weblog web site?

    The account helped me a acceptable deal. I have been tiny
    bit familiar of this your broadcast offered vivid clear idea

    Also visit my webpage - click here

    ReplyDelete
  22. Good day I am so delighted I found your blog, I really found you by mistake, while I was researching on Aol for
    something else, Anyways I am here now and would just like to say cheers for a marvelous post and a all round interesting
    blog (I also love the theme/design), I don’t have time to browse it
    all at the minute but I have book-marked it and also added in
    your RSS feeds, so when I have time I will be back to read
    a lot more, Please do keep up the excellent work.

    Also visit my weblog ... Email Console

    ReplyDelete
  23. I love reading through a post that can make men and women think.
    Also, many thanks for allowing for me to comment!

    My weblog ... the porn actress

    ReplyDelete
  24. Is it possible to set ACL on a proc file system . I have enabled acl in /etc/fstab for /proc but when i try to assign a user read only privilege , getting the following messages

    setfacl -m u:opc_new:r-- /proc/*
    setfacl: /proc/1: Operation not permitted
    setfacl: /proc/10: Operation not permitted
    setfacl: /proc/11: Operation not permitted
    setfacl: /proc/1188: Operation not permitted

    setfacl: /proc/20/autogroup: Permission denied
    setfacl: /proc/20/syscall: Permission denied
    setfacl: /proc/20/cmdline: Permission denied
    setfacl: /proc/20/stat: Permission denied
    setfacl: /proc/20/statm: Permission denied
    setfacl: /proc/20/maps: Permission denied
    setfacl: /proc/20/numa_maps: Permission denied
    setfacl: /proc/20/mem: Permission denied
    setfacl: /proc/20/mounts: Permission denied

    ReplyDelete
  25. Hi Ashok,

    I have following entry in my /etc/fstab

    /dev/root / auto defaults 1 1

    and I want to enable ACL on this entry so I have updated it accordingly

    /dev/root / auto defaults,acl 1 1

    and then after reboot the system but still getting the "operation not supported" error

    setfacl -m u:nobody:rw /usr
    setfacl: /usr: Operation not supported

    Could you please tell me how can I enable ACL in the given entry in /etc/fstab.

    Regards,
    Abhishek

    ReplyDelete