[Acl-Devel] Sharing ACL's

Bo Jacobsen bo.2 at systemhouse.dk
Wed Jan 10 14:44:51 CET 2007


Is it possible for a directory to just inherit/share it's parent
directory's acl. I don't mean having the same rights apply to it (a 
copy), but really sharing the ACL so that any changes made to the acl
of the parent, automatically also applies to it itself.

My problem is that it can be very difficult to change default(and
other) rights on large directories, if not all files/subdirs in the 
directory, have the same rights as the root dir of the tree.

With a large number of subdirs with their own sets of acl's, it's
almost impossible to change global rights on a whole tree, as one has
to redo all access rights of all subdirs where access rights differ
from the root of the tree.
    One could create separate directories for each set of rights, and
then just apply new rights to all objects in the tree (setfacl -R .) but 
then I'm really back to the original problem with lack of flexibility 
the old chmod.

If by default all created subdirs and files in a directory could be set
to just share access rights with it's parent directory, then even 
complex and constantly changing environments could be easily managed. 
And if subdirs, even deep down, in the tree where set not to inherit
rights from it's parent, then they would not be effected, no matter what 
changes where made to directories higher up.

/ Bo





More information about the acl-devel mailing list