Cleaning up ACL/Permissions

Question

Level 1

4 points

Cleaning up ACL/Permissions

Hi, in working on an Advanced Leopard server that someone had setup... I'm seeing ACL permissions listed for system level directories and files. To my knowledge, they shouldn't be there, is this a correct, in a normal install ACL's are not in use here?
In any case, with all the overalpping individual users based ACL's used in the general data files, I'd like to cclear them all out, if advisable, and start with some new one's based on gorups.
Can someone advise as to the best way to clean things up, without harming file access? - Lewis

iMac, Mac OS X (10.5.6)

Posted on Jun 3, 2009 8:09 AM

Reply

Answer 1

LewisO Author

Level 1

4 points

Jun 8, 2009 5:59 AM in response to LewisO

We've also noticed a number of files with "custom" permission, and again want to flatten all these to only a couple of well planned ACL's - any suggestions for correcting this situation?

Reply

Answer 2

Andbrowny

Level 4

1,614 points

Jun 8, 2009 7:47 PM in response to LewisO

Hi LewisO have you looked at chmod especially -N
from man chmod " -N Removes the ACL from the named file(s)."

Cheers

Reply

Answer 3

LewisO Author

Level 1

4 points

Jun 9, 2009 12:25 PM in response to Andbrowny

chmod -N, does anyone know if it's neccesary or recommended to remove ACL entries in AFP configurations before, or after, running this, or does running this remove those settings in the GUI? - Lewis

Reply

Answer 4

Andbrowny

Level 4

1,614 points

Jun 9, 2009 1:41 PM in response to LewisO

Hi again.
When setting/deleting acls via the commandline the changes will be reflected in the GUI as it is calling the same underlying tool. You could test this yourself by setting some acls on a test file in the GUI and then listing the acls via the ls -le command in the terminal then run the chmod -N command and repeat the ls -le command.
If you do this with the sharing 'browse' pane of Server Admin open in the background you will see the changes as they happen.
A couple of interesting articles on the subject here and here

Cheers

Reply

Answer 5

Jun 10, 2009 11:27 AM in response to LewisO

I use BatChmod app to clear ACLs. http://macchampion.com/arbysoft/Welcome.html

Reply