wiki:access/UsingAccessControlListsForAccessGroup

Using access control lists for access group to have read permission to /home and /short directories


Michael Naughton email 29/9/2012


ACCESS colleagues,

I've been thinking bit further about how to set read permissions to facilitate ACCESS collaboration in the vayu-nci environment. From my point of view, for starters at least, I'd like to be able to have my directories readable by everyone in the access group, since that's ecumenical enough to cover CoE and CSIRO folks as well as those in the ACCESS-BoM dp9 project.

I read David Singletons notes on access control lists. These seem to do what I want. As a guide to the commands I've done, I have a small script

~mjn548/README.acl

which uses commands from David's notes to sets up an access control list for my /home and /short/dp9 directories, with the "-d" option so it applies to all the subdirectories below:

setfacl -d -m g:access:rx /home/548/mjn548
setfacl -d -m g:access:rx /short/dp9/mjn548

with getfacl commands to show the settings once they're done.

I'll put this email on the BoM NCI Transfer wiki page. Does anyone else have any suggestions or comments about recommending this as a way to go for other ACCESS'ers?

Cheers, Mike

Last modified 6 years ago Last modified on Oct 10, 2014 2:28:47 PM