permissions_posix_acl_entry_parent
Ensure ACL on a file or folder and all its parent folders.
⚙️ Compatible targets: Linux
Parameters
Name | Documentation |
---|---|
path | Path of the file or directory. This parameter is required. |
recursive | Recursive Should ACLs cleanup be recursive, "true" or "false" (defaults to "false"). Choices:
This parameter is optional. |
user | User acls, comma separated, like: bob:+rwx, alice:-w. This parameter is optional. |
group | Group acls, comma separated, like: wheel:+wx, anon:-rwx. This parameter is optional. |
other | Other acls, like -x. This parameter is optional. |
parent_permissions_user | User acls, comma separated, like: bob:+rwx, alice:-w. This parameter is optional. |
parent_permissions_group | Group acls, comma separated, like: wheel:+wx, anon:-rwx. This parameter is optional. |
parent_permissions_other | Other acls, like -x. This parameter is optional. |
Outcome conditions
You need to replace ${path}
with its actual canonified value.
- ✅ Ok:
permissions_posix_acl_entry_parent_${path}_ok
- ☑️ Already compliant:
permissions_posix_acl_entry_parent_${path}_kept
- 🟨 Repaired:
permissions_posix_acl_entry_parent_${path}_repaired
- ☑️ Already compliant:
- ❌ Error:
permissions_posix_acl_entry_parent_${path}_error
Example
method: permissions_posix_acl_entry_parent
params:
path: VALUE
recursive: 'true'
user: OPTIONAL_VALUE
parent_permissions_other: OPTIONAL_VALUE
group: OPTIONAL_VALUE
parent_permissions_group: OPTIONAL_VALUE
other: OPTIONAL_VALUE
parent_permissions_user: OPTIONAL_VALUE
Documentation
Ensure ACL on a file or folder and all its parent folders.
Force the given ACL on the target path
(supports globbing).
- If
recursive
is set totrue
, the permissions will be applied to every files and folder under the resolvedpath
input. - If the
parent_permissions_*
inputs are not empty, they will be applied to every parent folders to the resolvedpath
input, excepting the root folder/
. - ACL inputs are expected to be comma separated, and to follow this schema:
myuser:wx
to force the ACL entrymyuser:+wx
to edit the ACL without enforcing them all
If the path
input resolves to /this/is/my/path/mylogfile
, parent folders permissions will be applied to:
/this
/this/is
/this/is/my
/this/is/my/path/
Examples:
-name: Allows bob to write in its logfile
method: permissions_posix_acl_entry_parent
path: /this/is/my/path/mylogfile
recursive: false
user: "bob:rwx"
parent_permissions_user: "bob:rx"
-name: Allows Bob and Alice to write in its logfile
method: permissions_posix_acl_entry_parent
path: /this/is/my/path/mylogfile
recursive: false
user: "bob:rwx,alice:+rwx"
parent_permissions_user: "bob:rx,alice:rx"