Difference between revisions of "Linux File Permissions"
Jump to navigation
Jump to search
Michael.mast (talk | contribs) (Created page with "==setfacl== The following can be used on a samba root share to allow access from multiple domains. *<b>NOTE</b> : This is still being evaluated and may not be best practice. I...") |
Michael.mast (talk | contribs) |
||
| Line 2: | Line 2: | ||
The following can be used on a samba root share to allow access from multiple domains. | The following can be used on a samba root share to allow access from multiple domains. | ||
*<b>NOTE</b> : This is still being evaluated and may not be best practice. I am using this for a FreeNAS share that needed a trusted domain to access ACLs copied using robocopy. | *<b>NOTE</b> : This is still being evaluated and may not be best practice. I am using this for a FreeNAS share that needed a trusted domain to access ACLs copied using robocopy. | ||
| + | *From a very helpful member on the ixsystems forums<ref>https://www.ixsystems.com/community/threads/smb-trusted-domain-sharing.79426/#post-550887</ref> | ||
| + | <pre> | ||
| + | R - read extended attributes, c - read permissions, f - file inherit, d - directory inherit. | ||
| + | These are covered here: https://www.ixsystems.com/community/threads/methods-for-fine-tuning-samba-permissions.50739/ | ||
| + | </pre> | ||
setfacl -m everyone@:r-x---a-R-c---:fd-----:allow | setfacl -m everyone@:r-x---a-R-c---:fd-----:allow | ||
Latest revision as of 08:43, 24 October 2019
setfacl
The following can be used on a samba root share to allow access from multiple domains.
- NOTE : This is still being evaluated and may not be best practice. I am using this for a FreeNAS share that needed a trusted domain to access ACLs copied using robocopy.
- From a very helpful member on the ixsystems forums[1]
R - read extended attributes, c - read permissions, f - file inherit, d - directory inherit. These are covered here: https://www.ixsystems.com/community/threads/methods-for-fine-tuning-samba-permissions.50739/
setfacl -m everyone@:r-x---a-R-c---:fd-----:allow
