Hi,

I'm trying to understand default ACLs but fail :-) I want to make sure 
that a certain user always has write access to all subdirectories that
are created with mode 755 in a directory (automatically by tomcat
unpacking .war files). System is SLES9.

I tried to set the default ACL mask to rwx to make sure the subdirs
inherit the same mask, but this fails.

zuse tomcluster/webapps> ls -lad .
drwxrwxr-x+ 20 tomcat hobit 880 Oct 19 10:37 .

zuse tomcluster/webapps> getfacl .
# file: .
# owner: tomcat
# group: hobit
user::rwx
user:csaba:rwx
group::rwx
mask::rwx
other::r-x
default:user::rwx
default:user:csaba:rwx
default:group::rwx
default:mask::rwx
default:other::r-x


Now, when creating a subdir with 755 (like tomcat does it):
zuse tomcluster/webapps> mkdir -m 755 test
zuse tomcluster/webapps> getfacl test
# file: test
# owner: tomcat
# group: tomcat
user::rwx
user:csaba:rwx                  #effective:r-x
group::rwx                      #effective:r-x
mask::r-x
other::r-x
default:user::rwx
default:user:csaba:rwx
default:group::rwx
default:mask::rwx
default:other::r-x


I don't understand why test/ has a mask of r-x. Shouldn't it
inherit the mask rwx from the parent directory? How can I make sure
that user csaba has write acess to subdirs with mode 755?

cu,
Frank


-- 
Dipl.-Inform. Frank Steiner   Web:  http://www.bio.ifi.lmu.de/~steiner/
Lehrstuhl f. Bioinformatik    Mail: http://www.bio.ifi.lmu.de/~steiner/m/
LMU, Amalienstr. 17           Phone: +49 89 2180-4049
80333 Muenchen, Germany       Fax:   +49 89 2180-99-4049
* Rekursion kann man erst verstehen, wenn man Rekursion verstanden hat. *
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to