From owner-freebsd-fs@FreeBSD.ORG Thu Feb 21 08:43:33 2008 Return-Path: Delivered-To: freebsd-fs@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id AF7EE16A400 for ; Thu, 21 Feb 2008 08:43:33 +0000 (UTC) (envelope-from gergely.czuczy@harmless.hu) Received: from marvin.harmless.hu (marvin.harmless.hu [195.56.55.204]) by mx1.freebsd.org (Postfix) with ESMTP id 08C6113C4F6 for ; Thu, 21 Feb 2008 08:43:32 +0000 (UTC) (envelope-from gergely.czuczy@harmless.hu) Received: from localhost (marvin-mail [192.168.0.2]) by marvin.harmless.hu (Postfix) with ESMTP id 9FA937BFE69; Thu, 21 Feb 2008 09:15:13 +0100 (CET) X-Virus-Scanned: by amavisd-new-2.5.3 (20071212) (Debian) at harmless.hu Received: from marvin.harmless.hu ([192.168.0.2]) by localhost (marvin.harmless.hu [192.168.0.2]) (amavisd-new, port 10024) with ESMTP id T5fwoxOG-s14; Thu, 21 Feb 2008 09:15:13 +0100 (CET) Received: from marvin.harmless.hu (localhost [127.0.0.1]) by marvin.harmless.hu (Postfix) with ESMTP id 758A17BFE75; Thu, 21 Feb 2008 09:15:11 +0100 (CET) Date: Thu, 21 Feb 2008 09:15:11 +0100 From: Gergely CZUCZY To: Andrei Kolu Message-ID: <20080221081511.GA12457@harmless.hu> References: <200802210957.13651.antik@bsd.ee> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=x-unknown; protocol="application/pgp-signature"; boundary="yrj/dFKFPuw6o+aM" Content-Disposition: inline In-Reply-To: <200802210957.13651.antik@bsd.ee> User-Agent: mutt-ng/devel-r804 (FreeBSD) Cc: freebsd-fs@freebsd.org Subject: Re: FreeBSD 6.3 ACL problem X-BeenThere: freebsd-fs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Filesystems List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Feb 2008 08:43:33 -0000 --yrj/dFKFPuw6o+aM Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable run ``id antik'' please. I've got a feeling that your antik user is part of the "wheel" group, which is not allowed to chdir into that directory. On Thu, Feb 21, 2008 at 09:57:13AM +0200, Andrei Kolu wrote: > Hi, I have this strange problem with ACL- I can go to one particular dire= ctory=20 > with two different users but can't access it with third. NOTE: there is n= o=20 > common group set up like samba- all users access this directory according= to=20 > ACL rules (other::r-x). Looks like different shell does not matter (csh o= r=20 > sh). Only difference whas that I created user "antik" before I enabled AC= L=20 > support for /usr filesystem. Should I report this like bug? >=20 > Commands listing: > --------------------------------------------------------------------- > sambatest# pwd > /root > sambatest# cd /home/ > sambatest# ll > total 10 > drwxr-xr-x 2 antik antik 512 Feb 20 16:23 antik > drwxrwxr-x+ 3 samba samba 512 Feb 20 15:53 samba > drwxr-xr-x 2 test1 test1 512 Feb 21 09:29 test1 > drwxr-xr-x 2 test2 test2 512 Feb 20 16:40 test2 > sambatest# getfacl samba/ > #file:samba/ > #owner:1003 > #group:1003 > user::rwx > user:nobody:rw- > group::r-x > group:wheel:rw- > mask::rwx > other::r-x > sambatest# su - antik > %cd /home/ > %ll > total 10 > drwxr-xr-x 2 antik antik 512 Feb 20 16:23 antik > drwxrwxr-x+ 3 samba samba 512 Feb 20 15:53 samba > drwxr-xr-x 2 test1 test1 512 Feb 21 09:29 test1 > drwxr-xr-x 2 test2 test2 512 Feb 20 16:40 test2 > %cd samba/ > samba/: Permission denied. > %logout > sambatest# su - test2 > $ cd /home > $ ll > total 14 > drwxr-xr-x 6 root wheel - 512 Feb 20 16:40 ./ > drwxr-xr-x 17 root wheel - 512 Feb 20 14:01 ../ > drwxr-xr-x 2 antik antik - 512 Feb 20 16:23 antik/ > drwxrwxr-x+ 3 samba samba - 512 Feb 20 15:53 samba/ > drwxr-xr-x 2 test1 test1 - 512 Feb 21 09:29 test1/ > drwxr-xr-x 2 test2 test2 - 512 Feb 20 16:40 test2/ > $ cd samba > $ pwd > /home/samba > --------------------------------------------------------------------- > _______________________________________________ > freebsd-fs@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-fs > To unsubscribe, send any mail to "freebsd-fs-unsubscribe@freebsd.org" >=20 Sincerely, Gergely Czuczy, Harmless Digital mailto: gergely.czuczy@harmless.hu --=20 Legacy software is software that works. --yrj/dFKFPuw6o+aM Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.4 (FreeBSD) owHlVs1v3EQUD60QwuJD5S942rZKIGt7vR9N4mrbRmlpIlJS1Nwq0c7aY3sUe8ad GcfZHjkhVAmEhITEodwQEiAOHIErnLhwgf+AC2cOXHhjr/cjH0hIvbFayTNv3vvN e7/f84w/evn80rkLv3z73f3VJx9/9tzXL/41eiMrtOaxnRF5yLjtdTqe7XX7gzW7 b/c2vH6P9Eg4oOtr6xu3f+i9siW4plzb++Oc+qDpkXbzlDB+FYKESEX1sNCRvW41 fjeZyoVimgnuA+Mp43S6ti8JVxGV9i0eiJDx2IdHhdA0tHPJuCajlFqWLDg8fMhC IFyzg+VlyFNKFHVgZ/mQQiw0EIgoReAYdEI0jEUha2coFJXAlJUTqUFEuE6hVSbo 3YJYiiJvQ5mwIEEf4AYpTUVJQ9ACqwkZxnIcGlQLZzTQQo4dy9rjsJ8UbXiTjqDr taHb6awD7tzZ8AdrvtfbvAOrHTS2YZOHkjJ4S6QFlBJL861rsM3asAMJwfR1gjsr jTzEFHIpsOIMSqYT2NzatdErIBxrNAkJjh5YBwuKlEgw+QytKqNht4OoVZQuBa5E yCnyW5WvYFRoA7OM5QUBVQqYnjgnTIYOvL23f8s31Eha8TC0RI0YiCwTvCYKUFnA R8oOKCiSjYht2JpsMQGuqpkSZaxCGlmHFhZQY2JZIIuUKlgRZkvfl/bR6w7sCnGg avRZ/iqhuEUoaK1ORrRGPVcClYAYWrJGVAmG7/F0PA0MKKpKVN0NSKGkBHuqboZW 1RgtGNFIYL07QLlpsxATG1q7E8QizwU2DHqAWygJEcOEx0rTzIF7iSjSEAMlrZyq mqu8R0V83bpWQ2whdYSHZkVp09hos5/Fz6Rn2NdU6YuQlyEaXCmEXlwIQnATkVF3 0ZymONdCkxQ8k2YoyyPkH/8A3ck70zwGXrdu8A54V/xur7Y3QVXcKvRqdGge80ED fzBZPrGTycaD5jEN8swb1N2o7acGdaF5LKbX79T2xXJjqiMSpLXJUHHRKOnPpqLk 2IJ45PXMrGr0Zma6BZuzPGrGXIxEOEaL0aB2Nb07nVTHymQ5I+qgCZ61+WJyqgB7 yunlecEu/x9kMhVPhagHPtylMmNK4V0BIeWMhk5Fh4hFoU9hr8G6NO33ajJPX/9Y fnAFzNuCg0ovQJQTKTrusSBv7V+D+n7HA+dE1Ampjm/ViOUeU+uEXPYZgp2y46Jk 9hminRE4k+0UVqoVt2G7aZhLzRlUNW9jfVZH3YP/9sOISFI6UqEdqRuToSNkjC8k qz4QzHGMXonWue+6ZqacOT/X+OHB7dbHdiTcGR6G7QsouCpGKpBsRNt4J3LzWTKu 4M0d3Zq523Oe86m06ivCusfwnpI0Hbct6zaVMY5g63ERPEbDNpFZai7Umyxm2MaW wdfCxwOtcnSCyvFGMvFzksKybNvg7tKYBGNQItIlqS/06bi6D0shD5RjvX/9/PNL 5nuu+Ra8cO7+C0tP77zz8593X/o0e+1ou/v73184v/36o7/0+SfvfvNTr/f0ve9l 8NUfTz748HDl1S//AQ== =Jn66 -----END PGP SIGNATURE----- --yrj/dFKFPuw6o+aM--