Linux默认ACL不尊重创建新文件
我将一些ACL设置为dir /app/certs
[root@someserver certs]# getfacl .
# file: .
# owner: root
# group: root
user::rwx
user:jenkins:rwx
group::r-x
mask::rwx
other::---
default:user::rwx
default:user:jenkins:rwx
default:group::r-x
default:group:controlm:rwx
default:mask::rwx
default:other::---
创建目录时,所有ACL均以预期为继承
[root@someserver certs]# mkdir test-dir
[root@someserver certs]# getfacl test-dir/
# file: test-dir/
# owner: root
# group: root
user::rwx
user:jenkins:rwx
group::r-x
mask::rwx
other::---
default:user::rwx
default:user:jenkins:rwx
default:group::r-x
default:group:controlm:rwx
default:mask::rwx
default:other::---
,但是创建一个“简单”的文件将覆盖所有ACL设置:
[root@someserver certs]# touch test-file
[root@someserver certs]# getfacl test-file
# file: test-file
# owner: root
# group: root
user::rw-
user:jenkins:rwx #effective:r--
group::r-x #effective:r--
group:controlm:rwx #effective:r--
mask::r--
other::r--
为什么或我错过了ACL的概念?
I have a few ACLs set to a dir /app/certs
[root@someserver certs]# getfacl .
# file: .
# owner: root
# group: root
user::rwx
user:jenkins:rwx
group::r-x
mask::rwx
other::---
default:user::rwx
default:user:jenkins:rwx
default:group::r-x
default:group:controlm:rwx
default:mask::rwx
default:other::---
When creating a directory all ACLs as inherited as expected
[root@someserver certs]# mkdir test-dir
[root@someserver certs]# getfacl test-dir/
# file: test-dir/
# owner: root
# group: root
user::rwx
user:jenkins:rwx
group::r-x
mask::rwx
other::---
default:user::rwx
default:user:jenkins:rwx
default:group::r-x
default:group:controlm:rwx
default:mask::rwx
default:other::---
But creating a "simple" file will overwrite all ACLs set:
[root@someserver certs]# touch test-file
[root@someserver certs]# getfacl test-file
# file: test-file
# owner: root
# group: root
user::rw-
user:jenkins:rwx #effective:r--
group::r-x #effective:r--
group:controlm:rwx #effective:r--
mask::r--
other::r--
Why so or did I missunderstood the concept of ACLs?
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。

绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论