How do I completely remove an ACL???

Question

Level 1

4 points

How do I completely remove an ACL???

I have a share that I can't seem to remove the ACL's from. I tried runnning the following command:
chmod -a# 0 /Volumes /Server HD /Shared Items /RB-Files
But I get a message saying no ACLS exist.

Is their a command or way to wipe all the permissions on a share inlcuding subfolders and files and then re-create them.

I even tried creating another share, copying the folders to the new share but the permissions seem to follow it.

I just want everyone to have full access to these folders and files and any other folders of files withing those.

Anyone's help is much appreciated.

Mac OS X (10.4.4)

Posted on Jan 19, 2006 10:31 AM

Reply

Answer 1

Jan 20, 2006 3:41 PM in response to Romanb

What makes you think the ACL is still there? If it's WGM, you might be getting duped. What does 'ls -le' show on the dir?

iBook G4 Mac OS X (10.4.4)

Reply

Answer 2

Jan 21, 2006 7:38 AM in response to Romanb

You are using the correct argument via chmod to remove an ACE. Under normal circumstances chmod -a# 0 ... could be used repeatedly to remove all ACL entries.

I've seen the behavior you're describing. Either Workgroup Manager indicates an ACL entry is present, or you see one with your directory listing in ls -el. Here's how I've been able to solve the problem.

1. Stop all file services or other services that need access to the volume that contains the troublesome share point or folder. Using Disk Utility (or diskutil) perform a Repair Volume (not Repair Permissions). This may catch errors in your Extended Attributes file for the volume in question, which can cause ACL information to be damaged.

2. After you've repaired the target volume, make sure you're up-to-date to at least Server 10.4.3. The earlier versions, I believe, were prone to causing such Extended Attributes problems in the first place.

3. Try chmod -a# 0 ... to remove the "stuck" ACL entry again. If it continues to fail, I've used the following tricks:

a. Duplicate the file or folder with the "stuck" ACL entry and delete its original. You can then remove the troublesome ACL entry on the duplicate, if it is inherited.

b. Use chmod =a# 0 ... to edit the difficult ACL entry, then delete it with chmod -a# 0 .... The "=a" argument allows you to edit an existing ACL entry, replacing its contents with new ones. Here's an example:

chmod =a# 0 "nobody deny readattr" /Volumes/Data/Shared
chmod -a# 0 /Volumes/Data/Shared

--Gerrit

Reply