Project

General

Profile

Actions

User story #12271

open

Generic method to set POSIX ACL

User story #12271: Generic method to set POSIX ACL

Added by François ARMAND over 7 years ago. Updated almost 3 years ago.

Status:
New
Priority:
N/A
Category:
Generic methods
UX impact:
Suggestion strength:
Require - I need this to use Rudder as I intend
User visibility:
Operational - other Techniques | Technique editor | Rudder settings
Effort required:
Name check:
Fix check:
Regression:

Description

We want to provide generic methods for POSIX ACL.

The requirements are:

- we need to be able to manage N ACL on P files in a single Technique built with these generic methods,
- we need to be able to define at minimum a list of files, ideally some fileset

It seems necessary to propose several methods that would let the user choose the reporting level he wants (or need):

- one ACL on one File (very precise, but may become extremely verbose)
- one ACL on a file set
- N ACLs on a file
- N ACLs on a file set.

Even in the case where we have N ACLs on a fileset, we need to provide verbose error message tracing exactly what problem was encountered on what file.

We will need to propose at least 3 kinds of action (and so 3 kinds of methods):

- one that set ACL without touching other existing ones,
- one that set ACL exactly to what is provided as parameter (less prioritary),
- one that remove (one or all) ACLs.

These methods will need to check for libacl support (introduced in #12270) for agent capability support.


Subtasks 3 (0 open3 closed)

User story #14514: Add a generic method to add ACLs on a given fileReleasedNicolas CHARLESActions
Bug #14517: Add a generic method to remove posix ACLReleasedAlexis MoussetActions
User story #14528: Add a generic method to enforce posix ACLRejectedActions

Related issues 2 (0 open2 closed)

Related to Rudder - User story #12270: Add libacl to Rudder agentReleasedAlexis MoussetActions
Related to Rudder - User story #22386: Add a 'Permissions POSIX ACLs entry parent' methodReleasedNicolas CHARLESActions

Updated by François ARMAND over 7 years ago Actions #1

Updated by François ARMAND over 7 years ago Actions #2

  • Description updated (diff)

Updated by Vincent MEMBRÉ over 7 years ago Actions #3

  • Target version changed from 4.3.0~rc2 to 4.3.0~rc3

Updated by Vincent MEMBRÉ over 7 years ago Actions #4

  • Target version changed from 4.3.0~rc3 to 4.3.0

Updated by Vincent MEMBRÉ over 7 years ago Actions #5

  • Target version changed from 4.3.0 to 4.3.1

Updated by Vincent MEMBRÉ over 7 years ago Actions #6

  • Target version changed from 4.3.1 to 4.3.2

Updated by Vincent MEMBRÉ over 7 years ago Actions #7

  • Target version changed from 4.3.2 to 410

Updated by Benoît PECCATTE over 7 years ago Actions #8

  • Target version changed from 410 to 4.3.2

Updated by Vincent MEMBRÉ over 7 years ago Actions #9

  • Target version changed from 4.3.2 to 4.3.3

Updated by Vincent MEMBRÉ over 7 years ago Actions #10

  • Target version changed from 4.3.3 to 4.3.4

Updated by Benoît PECCATTE over 7 years ago Actions #11

  • Target version changed from 4.3.4 to 4.3.5

Updated by Vincent MEMBRÉ about 7 years ago Actions #12

  • Target version changed from 4.3.5 to 4.3.6

Updated by Vincent MEMBRÉ about 7 years ago Actions #13

  • Target version changed from 4.3.6 to 4.3.7

Updated by Vincent MEMBRÉ about 7 years ago Actions #14

  • Target version changed from 4.3.7 to 4.3.8

Updated by Vincent MEMBRÉ almost 7 years ago Actions #15

  • Target version changed from 4.3.8 to 4.3.9

Updated by Alexis Mousset almost 7 years ago Actions #16

  • Target version changed from 4.3.9 to 4.3.10

Updated by François ARMAND almost 7 years ago Actions #17

  • Target version changed from 4.3.10 to 4.3.11

Updated by Félix DALLIDET almost 7 years ago Actions #18

  • Status changed from New to In progress
  • Assignee set to Félix DALLIDET

Updated by Félix DALLIDET over 6 years ago Actions #20

After working a bit with the cfengine lib, we can not yet:
-Force/remove a given component ACL. Ex: I want to remove all user specific ACL, but not change the group or other one.
-Manage the default ACLs on directories without enforcing all the complete list of ACEs at once.

We can:
-Add/remove specific ACEs for given user/group/other, but not for the default ones on directories
-Remove ACL of a file, and get back to a classic Unix right system
-Force a complete set of ACL, it is the only way to set "default" ACLs on directories that I could find.

Updated by Vincent MEMBRÉ over 6 years ago Actions #21

  • Target version changed from 4.3.11 to 4.3.12

Updated by Benoît PECCATTE over 6 years ago Actions #22

  • Target version changed from 4.3.12 to 5.0.10

Updated by Vincent MEMBRÉ over 6 years ago Actions #23

  • Target version changed from 5.0.10 to 5.0.11

Updated by Vincent MEMBRÉ over 6 years ago Actions #24

  • Target version changed from 5.0.11 to 5.0.12

Updated by Vincent MEMBRÉ over 6 years ago Actions #25

  • Target version changed from 5.0.12 to 5.0.13

Updated by Vincent MEMBRÉ over 6 years ago Actions #26

  • Target version changed from 5.0.13 to 5.0.14

Updated by Vincent MEMBRÉ about 6 years ago Actions #27

  • Target version changed from 5.0.14 to 5.0.15

Updated by Vincent MEMBRÉ about 6 years ago Actions #28

  • Target version changed from 5.0.15 to 5.0.16

Updated by Alexis Mousset almost 6 years ago Actions #29

  • Target version changed from 5.0.16 to 5.0.17

Updated by Vincent MEMBRÉ over 5 years ago Actions #30

  • Target version changed from 5.0.17 to 5.0.18

Updated by Vincent MEMBRÉ over 5 years ago Actions #31

  • Target version changed from 5.0.18 to 5.0.19

Updated by Vincent MEMBRÉ over 5 years ago Actions #32

  • Target version changed from 5.0.19 to 5.0.20

Updated by Vincent MEMBRÉ about 5 years ago Actions #33

  • Target version changed from 5.0.20 to 797

Updated by Benoît PECCATTE over 4 years ago Actions #34

  • Target version changed from 797 to 6.1.14

Updated by Vincent MEMBRÉ over 4 years ago Actions #35

  • Target version changed from 6.1.14 to 6.1.15

Updated by Vincent MEMBRÉ over 4 years ago Actions #36

  • Target version changed from 6.1.15 to 6.1.16

Updated by Vincent MEMBRÉ over 4 years ago Actions #37

  • Target version changed from 6.1.16 to 6.1.17

Updated by Benoît PECCATTE about 4 years ago Actions #38

  • Project changed from 41 to Rudder
  • Category changed from Generic methods - File Management to Generic methods

Updated by Vincent MEMBRÉ about 4 years ago Actions #39

  • Target version changed from 6.1.17 to 6.1.18

Updated by Vincent MEMBRÉ about 4 years ago Actions #40

  • Target version changed from 6.1.18 to 6.1.19

Updated by Vincent MEMBRÉ over 3 years ago Actions #41

  • Target version changed from 6.1.19 to 6.1.20

Updated by Vincent MEMBRÉ over 3 years ago Actions #42

  • Target version changed from 6.1.20 to 6.1.21

Updated by Vincent MEMBRÉ over 3 years ago Actions #44

  • Target version changed from 6.1.21 to old 6.1 issues to relocate

Updated by Alexis Mousset almost 3 years ago Actions #45

  • Status changed from In progress to New

Updated by Alexis Mousset almost 3 years ago Actions #46

  • Related to User story #22386: Add a 'Permissions POSIX ACLs entry parent' method added

Updated by Alexis Mousset almost 3 years ago Actions #47

  • Target version changed from old 6.1 issues to relocate to Ideas (not version specific)
Actions

Also available in: PDF Atom