directory ACLs and open() mode

From: Micha³ Kurowski (mkur_at_poczta.gazeta.pl)
Date: 12/22/04


Date: Wed, 22 Dec 2004 02:59:24 +0000 (UTC)

Hi,

I've got a problem with forcing a specific umask-like behavior in a
directory.

What I need is a "-rw-r-----" mode for files in a logs directory of
DS 5.2 on Solaris 9 (kernel: Generic_117171-12) so the that all the
group members have permission to read the logs. I was able to create a
proper ACL for it and verified "touching" new files does indeed work
as expected.

But unfortunately new log files (created after rotation) do not obey
the ACL. They are always created in "-rw------" mode. By browsing
archives I found Casper Dik note saying "open()" mode doesn't
respect ACL setting. I'd like to ask for your experience with that
and/or possible workarounds.

The specific "ls" output:

drwxr-s---+ 2 ldap Secondary Admins 4096 gru 22 03:02 .

The "getfacl" output:

# file: .
# owner: ldap
# group: Secondary Admins
user::rwx
group::r-x #effective:r-x
mask:r-x
other:---
default:user::rwx
default:group::r-x
default:mask:r-x
default:other:---

Cheers,

-- 
Michal Kurowski
<mkur@poczta.gazeta.pl>


Relevant Pages

  • Display welcome login message ???
    ... I have seen that it is possible to send a welcome messge to a user when he ... logs on. ... or Group members? ... For example I would like to send a different welcom message if current ...
    (microsoft.public.win2000.security)
  • Send message at login
    ... I have seen that it is possible to send a welcome messge to a user when he ... logs on. ... or Group members? ... For example I would like to send a different welcom message if current ...
    (microsoft.public.win2000.group_policy)