acl issue for groups

General support questions
Post Reply
vinmansbrew
Posts: 28
Joined: 2016/10/06 20:12:33

acl issue for groups

Post by vinmansbrew » 2017/08/10 17:18:39

So I have an issue with what I think are ACLs. I have a directory with acl set for a group. Certain users in this group are able to have full control, but some are not. The ones that have issues are able to add new files and remove the ones they have added, but any files put in by people in the same group, cannot be manipulated. I initially tried removing the affected users from the group, then removing them from the server along with their home directory, and rebooting. Then adding them back in.
Any thoughts on the cause of this?
I am on centos 6.9 x64

User avatar
TrevorH
Site Admin
Posts: 33219
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

Re: acl issue for groups

Post by TrevorH » 2017/08/10 17:25:08

Post the output of getfacl for one of the directories in question along with the output of ls -la (a sample of the '.', '..' and affected and unaffected files would do if there are more than a few). Also the output from groups someuser for one of the affected and unaffected users.
The future appears to be RHEL or Debian. I think I'm going Debian.
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 and 6 are deadest, do not use them.
Use the FAQ Luke

vinmansbrew
Posts: 28
Joined: 2016/10/06 20:12:33

Re: acl issue for groups

Post by vinmansbrew » 2017/08/11 13:31:03

I forgot to add that the users were able to make changes before.
Anyways, getfact of the directory in question is:
# file: resources
# owner: apache
# group: apache
user::rwx
user:mmlewis2:rwx
user:mkwalker:rwx
user:fastspot:rwx
group::rwx
mask::rwx
other::rwx
default:user::rwx
default:group::rwx
default:group:webedit:rwx
default:mask::rwx
default:other::rwx

ls -la of the directory, just some of the files.

-rwxrwxrwx+ 1 apache apache 1573445 May 10 2016
-rwxrwxrwx+ 1 apache apache 1573357 May 16 2016
-rwxrwxrwx+ 1 apache apache 401276 Jan 19 2015
-rwxrwxrwx+ 1 apache apache 266694 May 16 2014
-rwxrwxrwx+ 1 apache apache 1883366 Jul 11 2013
-rwxrwxrwx+ 1 apache apache 43553 Feb 16 2016
-rwxrwxrwx+ 1 apache apache 22844 Mar 29 2016
-rwxrwxrwx+ 1 apache apache 1485809 May 7 2015
-rwxrwxrwx+ 1 apache apache 326677 Dec 1 2014
-rwxrwxrwx+ 1 apache apache 42496 Aug 18 2013
-rwxrwxrwx+ 1 apache apache 2088602 May 5 2014
-rwxrwxrwx+ 1 apache apache 288205 Aug 23 2013
-rwxrwxrwx+ 1 apache apache 103385 Jul 18 2013
-rwxrwxrwx+ 1 apache apache 81240 Jul 18 2013
-rwxrwxrwx+ 1 apache apache 81665 Feb 24 2016
-rwxrwxrwx+ 1 apache apache 88671 Sep 16 2014
-rwxrwxrwx+ 1 apache apache 476003 Sep 16 2015
-rwxrwxrwx+ 1 apache apache 16033 May 25 2016
-rwxrwxrwx+ 1 apache apache 50604 May 23 2016
-rwxrwxrwx+ 1 apache apache 52438 Nov 9 2015
-rwxrwxrwx+ 1 apache apache 27875 Nov 9 2015
-rwxrwxrwx+ 1 apache apache 176776 Feb 21 13:24
-rwxrwxrwx+ 1 apache apache 279927 Feb 21 13:24
-rwxrwxrwx+ 1 apache apache 349607 Oct 9 2015
-rwxrwxrwx+ 1 apache apache 348540 Apr 14 2016
-rwxrwxrwx+ 1 apache apache 349716 Sep 29 2015
-rwxrwxrwx+ 1 apache apache 80283 Jan 29 2015
-rwxrwxrwx+ 1 apache apache 79872 Sep 23 2013
-rwxrwxrwx+ 1 apache apache 25091 Feb 6 2014
-rwxrwxrwx+ 1 apache apache 88114 Jan 29 2015
-rwxrwxrwx+ 1 apache apache 25071 Sep 11 2014
-rwxrwxrwx+ 1 apache apache 197887 Nov 9 2013
-rwxrwxrwx+ 1 apache apache 68698 Jul 27 2015
-rwxrwxrwx+ 1 apache apache 1603779 Oct 30 2013
-rwxrwxrwx+ 1 apache apache 2521521 Nov 11 2013
-rwxrwxrwx+ 1 apache apache 94140 Apr 24 2014
-rwxrwxrwx+ 1 apache apache 13731 Oct 22 2014
-rwxrwxrwx+ 1 apache apache 12108 Jul 6 2015
-rwxrwxrwx+ 1 apache apache 18913 Jul 6 2015
-rwxrwxrwx 1 apache apache 591812 Jul 29 2016
-rwxrwxrwx+ 1 apache apache 5649 Jul 23 2015
-rwxrwxrwx+ 1 apache apache 91321 Jan 11 2016
-rwxrwxrwx+ 1 apache apache 524237 Sep 9 2016
-rwxrwxrwx 1 apache apache 1239748 Jul 29 2016
-rwxrwxrwx 1 apache apache 107164 Aug 12 2016
-rwxrwxrwx 1 apache apache 1224464 Aug 5 2016
-rwxrwxrwx+ 1 apache apache 95023 Apr 10 2015

I just removed the file name. Also, I am getting file names from 1 user that do not work, and some that do, to try and compare.

Post Reply