Set default directory and file permissions

Question

Level 1

145 points

Set default directory and file permissions

I'm trying to use setfacl to set the default permissions for directories and files but I get an error saying "sudo: setfacl: command not found." What I am trying to do is share a specific directory on a local external drive connected by Thunderbolt. Everyone in the group has access to the drive and can view all the files but once a new file is created, the group permissions are not updated. Here is an example of two PDF file. The one created by userA only has permissions for that user where the file created by userB allows all users to open and modity the file.

-rw------- 1 userA staff 1988176 Feb 13 15:09 TestFile01.pdf

-rwxr-----+ 1 userB staff 1827102 Feb 13 15:05 TestFile02.pdf

0: group:MarketingGroup allow read,write,append,readattr,writeattr,readextattr,writeextattr,readsecurity

I can manually update the permissions through the Get Info window but this requires me to reset permissions every time a person saves a new file to the drive. There needs to be a way to do this automatically.

Here is what I tried but the setfacl command is not supported.

sudo setfacl -Rdm g:GroupName:rwx /DirectoryPath

iMac, OS X Mountain Lion, User since 1992 Mac IIsi

Posted on Feb 13, 2013 2:48 PM

Reply

Answer 1

Feb 13, 2013 2:56 PM in response to Dakoda

setfacl isn't included in OS X. Most/all acl stuff can be done through chmod

Reply

Answer 2

Dakoda Author

Level 1

145 points

Feb 13, 2013 4:52 PM in response to Frank Caggiano

That's what I was afraid of. How would you suggest I modify the following to make this work correctly?

sudo setfacl -Rdm g:GroupName:rwx /DirectoryPath

Reply

Answer 3

Feb 13, 2013 6:05 PM in response to Dakoda

I've never used setfacl so rather then showing me the command if you describe what it is you are looking to do then a way might be found.

Message was edited by: Frank Caggiano - Also have you looked at the man page for chmod?

Reply

Answer 4

Dakoda Author

Level 1

145 points

Feb 13, 2013 6:47 PM in response to Frank Caggiano

Thanks Frank. I have an externat drive connected to my Mac via Thunderbolt. On this drive I have a specific directory that I'm shairing with Mac and PC users. I've created a group on the network to limit access to this directory to specific users. That works perfectly. The issue I'm having is when one of these users creates a new file in this directory or any of it's subdirectories, no one has permission to open or edit the file. Right now I'm using Get Info to modify the permissions of the folder and all enclosed items. When I check the permissions of the files I've "corrected" I notice this extra imformation "0: group:MarketingGroup allow read,write,append,readattr,writeattr,readextattr,writeextattr,readsecurity." This is not included when I check the permissions of items saved by other uses in the group.

So my question is how do I set the default permissions for this directory so every new file and directory will have the correct permissions to allow anyone in this group full access to open and modify every file?

Thanks for your help!!!!

Reply

Answer 5

Dakoda Author

Level 1

145 points

Feb 26, 2013 8:49 AM in response to Dakoda

I figured it out:

chmod -R +a "group:GroupName allow read,write,append,readattr,writeattr,readextattr,writeextattr" /Path-To-Shared-Directory

Reply