Hi Gurus ,
sorry for the simple question but i culd not achive to use setfacl.

I have created a file called x.x in a directory.


verdenfs1@root/ #setfacl -m user:spss:rwx x.x
verdenfs1@root/ #getfacl x.x

# file: x.x
# owner: root
# group: other
user::rwx
user:spss:rwx           #effective:---
group::---              #effective:---
mask:---
other:---


-rwx------+  1 root     other          7 May 30 11:07 x.x



But user spss cant read the file although i have set the acl.

I will be appreciated if someone shows my mistake.

Kind Regards,
tolga

On 30 May 2005 01:05:28 -0700
"hopehope_123" <hopehope_123@yahoo.com> wrote:

> I have created a file called x.x in a directory.
> 
> verdenfs1@root/ #setfacl -m user:spss:rwx x.x
> verdenfs1@root/ #getfacl x.x
> 
> # file: x.x
> # owner: root
> # group: other
> user::rwx
> user:spss:rwx           #effective:---
> group::---              #effective:---
> mask:---
> other:---
> 
> -rwx------+  1 root     other          7 May 30 11:07 x.x
> 
> But user spss cant read the file although i have set the acl.
> 
> I will be appreciated if someone shows my mistake.

You must set the ACL mask first:

$ setfacl -m mask:rwx x.x
$ setfacl -m user:spss:rwx x.x

Your current mask is ---, meaning that all ACL settings
will be ineffective, because the mask defines the maximum
permissions that can be given to users or groups. 

Take care,

-- 
Stefaan
-- 
As complexity rises, precise statements lose meaning,
and meaningful statements lose precision. -- Lotfi Zadeh 

Hi Stefaan,

Thank you very much for your help , now it works. 

Kind Regards,
tolga

>>>>> Stefaan A Eeckels <tengo@DELETEMEecc.lu> writes:

> On 30 May 2005 01:05:28 -0700 "hopehope_123"
> <hopehope_123@yahoo.com> wrote:

[...]

>> But user spss cant read the file although i have set the acl.
>> 
>> I will be appreciated if someone shows my mistake.
>
> You must set the ACL mask first:
>
> $ setfacl -m mask:rwx x.x $ setfacl -m user:spss:rwx x.x

Either that or use '-r' to have setfacl adjust the mask automagically.

-- 
Stefan Jankowski
Sysadmin, University of Freiburg, CS Dpt.
s/spambucket//
s/dave\.null/${FORENAME}.${LASTNAME}/