|
|
Script to list all filesystem objects with ACLs
The hint category is 10.5. Won't this also work on (and be good for) 10.4.x? I think I remember that ACLs were turned off on the main volume by default. So…if this is an issue, what exactly is the "Repair Permissions" function of the Disk Utility doing? Also, is there another tool that we can use to look at the ACL's? "Repair permissions" is just trying to restore POSIX permissions on Apple System and Application files. Like the OP mentioned, it doesn't work all that well. For instance, /var/log/secure.log should have permssions of 0600, but on my machine they are set to 0640 for some reason, a security risk. I ran disk utility which caught this error, exited with success, and never actually fixed this mistake. Furthermore, I don't think it corrects ACL errors. As far as ACL tools, Apple's ls comes with the '-e' option, which will print all ACLs on files, and Apple's chmod lets you set, edit, and delete ACLs. -- Great post. I know that lots of vendors are lax about POSIX permissions, but I didn't know of any that added ACLs. You didn't imply that they did necessarily, but do you know of any that do? That's pretty worrying, because clearly it's possible. Also, you may want to set the output directory to /tmp or something else that's sure to exist, or else include a 'mkdir ~/acls'.
Script to list all filesystem objects with ACLs
A great suggestion (I must have been a little too sleepy when I finished the script).
Immediately after the "else", you can add the following line:
That will create the directory, if necessary, and be silent if it's already there.
Script to list all filesystem objects with ACLs
And, on the question about vendors: |
SearchFrom our Sponsor...Latest Mountain Lion HintsWhat's New:HintsNo new hintsComments last 2 daysLinks last 2 weeksNo recent new linksWhat's New in the Forums?
Hints by TopicNews from Macworld
From Our Sponsors |
|
Copyright © 2014 IDG Consumer & SMB (Privacy Policy) Contact Us All trademarks and copyrights on this page are owned by their respective owners. |
Visit other IDG sites: |
|
|
|
Created this page in 0.08 seconds |
|