Questions tagged [acl]

ACL or Access Control List is a list of permissions attached to an object. It specifies which users/system processes have access to the object as well as what they are allowed to do.

Filter by
Sorted by
Tagged with
0 votes
1 answer
181 views

Is there a cli command to dump the ACL associated to a file (in a MacOS context)?

I would like to know if it is possible, and if it is, how can be seen the ACL (Access Control List) associated to a file in a MacOS context, using command line (not using the GUI "File ...
nostromo's user avatar
0 votes
1 answer
377 views

ACL for File Sharing (SMB) is changing ACL of the folder itself

When I set ACL with the permissions for the folder in File Sharing (System Settings > General > Sharing > File Sharing > info) the same ACL and permissions are set for the folder itself on ...
paulie's user avatar
  • 41
1 vote
0 answers
125 views

Sharing permissions and umask not applied to files created within shared folder

I have a Brother printer which is able to save scans to a Samba v1 share. I have configured a shared only user named "brother" in macOS (Ventura latest release) and have setup everything in ...
TheRiddler1982's user avatar
2 votes
1 answer
108 views

App reported "in use" that isn't

I downloaded a Catalina installer which can't run because I am already on Monterey. I copied it to an external drive and put the internal copy in the Trash. When I try to empty the Trash, Finder ...
WGroleau's user avatar
  • 4,776
0 votes
0 answers
372 views

Can I create access control entries for macos apps in /System/Applications?

I am trying to set user-specific access to certain apps and folders on a mac, and I found this answer to be extremely helpful. (Thanks @Gordon Davisson!) However, I can't seem to run the chmod ...
brahn's user avatar
  • 101
1 vote
2 answers
449 views

Accessing file in restricted directory

As an experiment I tried, and failed, to print a file in another user's Documents directory. The accessing user (admin) has read permission on the file however they have no permissions on its parent ...
We'll See's user avatar
1 vote
0 answers
60 views

How to Configure a Vanilla APFS Volume for Time Machine

I'd like a way using the CLI to set the ACEs and the accompanying files so that Time Machine will recognize a vanilla APFS volume as a Time Machine volume. I need the CLI that generates the conditions ...
J. Freese's user avatar
0 votes
2 answers
660 views

Why does macOS Mojave change a group's name automatically?

Created a user group called "Duo". When I add it to a directory, macOS Mojave (10.14.6) automatically changes the name to "Dev". Even id says my user is group "Dev" (and ...
sfxedit's user avatar
  • 1,712
1 vote
0 answers
38 views

macOS, user/group with no privileges to delete

In my environment we use macs. I've been asked if it's possible to remove the capability of deleting files/folders for users. Most of our users are developers and we provide local admin rights to ...
Federico Joly's user avatar
3 votes
1 answer
243 views

How to search for files based on ACL or group permissions

There are double entries for the group 'everyone' under permissions. This is the state of hundreds of files in the Documents Folder. I don't know how they got there and it's now a big problem for my ...
Richard Rasch's user avatar
1 vote
1 answer
183 views

How to restore select files from Time Machine and fix permissions issues

I like doing things from the command line (eg copying only 24 select files by wildcard from my time machine backups) and Time Machine's extra permissions and protections catch me out every time. ...
ChrisJ's user avatar
  • 191
3 votes
3 answers
2k views

How do I copy user home directories from one system to another while preserving all attributes?

I am in the process of dismantling an old macOS High Sierra Server and rebuilding it as a macOS Mojave Server. I've exported Users and Groups from OpenDirectory on the old one and imported them in ...
gctwnl's user avatar
  • 684
3 votes
1 answer
3k views

In Finder and Terminal — can not delete a folder, (Error = "Directory not empty")

Anytime I've run up against this in the past, I was always able to figure it out, and usually via the command line. I'll list all the commands I tried so far, followed by other things I've tried below ...
Wharf Cat's user avatar
2 votes
0 answers
174 views

Setting Strict File Permissions and ACL’s for a KeepassXC keyfile on Mac OS

I use keepassXC on mac for my password manager. I use the keyfile feature with it, which requires a keepassxc created keyfile to be read in order for the database to be unlocked (veracrypt utilizes ...
DanRan's user avatar
  • 670
0 votes
1 answer
195 views

chown/chmod/chgrp on Users/____/Library without disabling SIP?

I know how to disable and enable SIP, but is there an easier way to remove ACLs from a user's library? I want to move and/or copy some things from my admin account to my regular account and SIP ...
WGroleau's user avatar
  • 4,776
1 vote
1 answer
2k views

Modify permissions of files created via SMB in a specific directory

I have a multifunction printer that has a SMB-capable scanning unit. I want to have the printer send scans to an SMB share on my iMac running macOS High Sierra (10.13). I do not want to store my main ...
jstarek's user avatar
  • 3,518
1 vote
1 answer
282 views

Create symlinks in time machine backup?

I have a time machine backup /Volumes/MyTimeMachine/Backups.backupdb/MyMachine. Exactly as Apple creates a Latest symlink pointing toward the latest snapshot, I would like to create symlinks toward ...
user avatar
8 votes
1 answer
9k views

What are all the available ACL attributes in Mac OS 10.13 High Sierra?

In Mac OS, file and folder access permissions are managed in a layered way with basic unix (POSIX) style: owner/group/everyone and read/write/execute modes along with, recently added Access Control ...
Matt's user avatar
  • 562
4 votes
0 answers
517 views

High Sierra Group ACLs Broken?

So far as I've been able to determine, group ACLs appear to have no effect at all in macOS 10.13.3. Given a group "editors" with members "joe" and "jane" who belong to no other groups, and a folder "...
A Bowler Cat's user avatar
0 votes
1 answer
103 views

How can I review custom privileges?

The Get Info box for an external hard drive shows "Custom" under Privileges in section Sharing & Permissions. Interestingly this is for groups with these names com.apple.sharepoint.group.6 com....
Alex Ixeras's user avatar
  • 1,333
1 vote
1 answer
98 views

How do I clone the local drives' Users directory ACL to an external drive?

My local drive (Macintosh HD) runs out of space so I want to setup an external drive (External HD) with the same /Users directory and associated ACL as on the Macintosh HD drive and offload some of ...
Alex Ixeras's user avatar
  • 1,333
3 votes
1 answer
826 views

Can't remove ACE from directory

My applications folder has an ACE entry which prevents me from deleting its contents (not even as root, with sip disabled). My problem is, that the command sudo chmod -N /Applications tells me, that ...
user avatar
0 votes
0 answers
234 views

How to execute ACL changes that Server.app makes to shares from shell?

I have a situation where Server.app works for many hours, never seeming to finish, when applying permissions on a large share. What is the shell incantation that would apply read + write access to ...
ylluminate's user avatar
  • 5,272
1 vote
0 answers
429 views

Apple switching to SMB, but SMB doesn't handle permissions the POSIX way: so what are they doing?

Rumor has it that Apple is switching from AFP to SMB for their file sharing. However, SMB has always had a problem with permissions (i.e. everything is executable or everything is not executable). ...
iAdjunct's user avatar
  • 311
1 vote
2 answers
285 views

How do I remove multiple owners from a file/folder?

While trying to set up MAMP/PHPStorm, I CHOWNed the OWNER of my Sites folder to _www from myUser. Since this did not resolve the problem I was experiencing, I attempted to CHOWN myUser /Users/myUser/...
Parradoxx's user avatar
  • 144
1 vote
0 answers
272 views

After update to El Capitan, can't write to my home dir?

I did a hard drive wipe and clean reinstall for OS X 10.11 El Capitan. I now get some permission errors about my home directory. Here's an example, after running the program psql, which is the ...
Rob N's user avatar
  • 1,630
1 vote
1 answer
984 views

How do I check the effective file permissions/accessibilty for/of a given file and a given user?

How do I check the effective file permissions (including ACLs)/accessibility for/of a given file and a given user (including service/system accounts) without checking the whole path manually? Example:...
klanomath's user avatar
  • 66.3k
0 votes
1 answer
305 views

How can I get Quartz Composer to save files after the first time?

I'm learning how to use Quartz Composer (Version 4.6 (151.1)) running on Yosemite (10.10.5 (14F27)). I can successfully create a Quartz Composer document and save it to any folder. However, after ...
Travelling Man's user avatar
0 votes
1 answer
845 views

Flawed user permissions: cannot save files or open programs

I'm on OSX 10.9.1 and I changed settings on my user folder. As far as I can remember I "only" pressed cmd + i on the user folder and under access rights I chose apply to all sub folders. Don’t ask me ...
Fred's user avatar
  • 3
0 votes
1 answer
691 views

Using ACL to allow users to add files but not subdirectories in a folder

I am on Mac OS X Lion and wants to prevent users from creating sub directories inside a folder but at the same time users should be able to add files to the same directory. The following command does ...
Nisar Ahmed's user avatar
1 vote
1 answer
157 views

How do I grant a second user complete access to a user's Home folder?

I want a second user (but NOT all users) to have complete read/write access to a user's Home folder – both users should have the same level of access on all files within, even those created by each ...
Aaron Adams's user avatar
2 votes
2 answers
2k views

Is there a way to modify keychain item ACL descriptions?

I'm importing my digital ID (X.509 certificate and private key for signing, verifying, encrypting, and decrypting messages) into the keychain. In the GUI I see my certificate and the corresponding ...
galaxy's user avatar
  • 99
1 vote
0 answers
61 views

Weird permissions

I moved to a new machine, and Migration Assistant failed miserably. I had to move files by hand, and in doing so some mighty strange things started happening. I have finally tracked these down. Many ...
Maury Markowitz's user avatar
1 vote
1 answer
3k views

How do I remove file access for unknown user (as reported by Finder's File Info)? [closed]

File Info, under Sharing & Permissions, says "You have custom access" and lists: Name Privilege joe (user) Read & Write staff (group) Read & Write everyone Read only But ...
PartialOrder's user avatar
2 votes
1 answer
117 views

file not behaving as it should, permission problems

I cannot delete or move a file owned by me which I have read write permissions. Could anybody help me figure out why? The file is owned by me in group staff and perms are set to 644. The file is ...
13uz's user avatar
  • 33
4 votes
1 answer
2k views

Can't write to ~/Library, even though permissions look OK

I'm totally stumped on this one — a Macbook Air, 10.9.2. As far as I can tell, I should be able to write to my Library directory. Everything I can see suggests I should be able to: [njvack@zot ...
Nate's user avatar
  • 535
1 vote
1 answer
5k views

Mavericks: User no longer owner of Home folder and content

One of the Users (called: The_Problematic_User) of a Mavericks installed MacBook Pro is no longer owner of the Home folder and content. Here's what we've tried to no avail: restart computer and log ...
pdeli's user avatar
  • 633
2 votes
2 answers
366 views

Strange ACLs on OS X System

I have a folder on a HFS+ volume I can't delete. I already tried to get rid of the ACLs but somehow this doesn't worked out. The folder is calles CrashPlan.app. Here is what the terminal says: ...
user avatar
1 vote
2 answers
3k views

Moving a folder with "sudo mv", how to preserve ACLs?

I'm moving a whole folder from one volume to another (both HFS+), using sudo mv, and thought ACLs would be preserved. However at the end of transfer I see that they haven't been kept, and since mv ...
CharlesB's user avatar
  • 223
1 vote
2 answers
567 views

Set inherited permissions on iLifeAssetManagement?

I have a second user account on my machine that is only used for iCloud syncing for my wife's apple id. In order to consolidate photostream photos I'm going to set up a process to pull new photos out ...
WalterGr's user avatar
2 votes
0 answers
439 views

mount AFP share, carrying the server's file ACLs through to the client

The goal: I've got a server sharing files via AFP. On the server, these files have ACLs. When I mount this share with a client, I'd like for the files that appear on the client to retain the original ...
Sean's user avatar
  • 129
2 votes
0 answers
151 views

Stopping ACL inheritance from the command line in OS X Lion?

With the following folder structure on a file share: - Department (directory) + User1 (directory) + User2 (directory) + User3 (directory) Whenever I add an ACE to the Department directory, it'...
ballofpopculture's user avatar
3 votes
2 answers
978 views

Time Machine and the dreaded negative sign

I am about to modify the file ownerships in my Time Machine disk, which uses ACLs. Since it is my (only) backup disk, I thought I'd solicit comments on the script before I run it. The objective is to ...
Calaf's user avatar
  • 4,359
29 votes
5 answers
58k views

How do I use chmod on a Mac to make new files inherit parent directory permissions?

On MacOS. I want to make it so that any new files/folders that get created within a specific folder have the same permissions (not group, that's already taken care of) as those of the parent directory....
Jeremy Hicks's user avatar