{"id":17481,"date":"2024-11-18T17:45:21","date_gmt":"2024-11-18T09:45:21","guid":{"rendered":"https:\/\/fwq.ai\/blog\/17481\/"},"modified":"2024-11-18T17:45:21","modified_gmt":"2024-11-18T09:45:21","slug":"%e6%8c%87%e5%8d%97%ef%bc%9a%e4%bd%bf%e7%94%a8linux-acl%e4%bf%9d%e6%8a%a4%e6%82%a8%e7%9a%84%e6%96%87%e4%bb%b6%e5%92%8c%e7%9b%ae%e5%bd%95","status":"publish","type":"post","link":"https:\/\/fwq.ai\/blog\/17481\/","title":{"rendered":"\u6307\u5357\uff1a\u4f7f\u7528Linux ACL\u4fdd\u62a4\u60a8\u7684\u6587\u4ef6\u548c\u76ee\u5f55"},"content":{"rendered":"

\"\u6307\u5357\uff1a\u4f7f\u7528Linux<\/p>\n

\u5728Linux\u64cd\u4f5c\u7cfb\u7edf\u4e2d\uff0cACL\uff08Access Control List\uff09\u662f\u4e00\u79cd\u975e\u5e38\u5f3a\u5927\u7684\u5de5\u5177\uff0c\u53ef\u4ee5\u7528\u6765\u66f4\u7cbe\u7ec6\u5730\u63a7\u5236\u5bf9\u6587\u4ef6\u548c\u76ee\u5f55\u7684\u8bbf\u95ee\u6743\u9650\u3002\u901a\u8fc7ACL\uff0c\u7528\u6237\u53ef\u4ee5\u4e3a\u7279\u5b9a\u7684\u7528\u6237\u6216\u7528\u6237\u7ec4\u8bbe\u7f6e\u7279\u5b9a\u7684\u6743\u9650\uff0c\u800c\u4e0d\u4ec5\u4ec5\u5c40\u9650\u4e8e\u4f20\u7edf\u7684\u7528\u6237\u548c\u7ec4\u7684\u8bfb\u3001\u5199\u3001\u6267\u884c\u6743\u9650\u3002\u672c\u6587\u5c06\u4e3a\u60a8\u4ecb\u7ecd\u5982\u4f55\u4f7f\u7528ACL\u6765\u4fdd\u62a4\u60a8\u7684\u6587\u4ef6\u548c\u76ee\u5f55\uff0c\u540c\u65f6\u63d0\u4f9b\u5177\u4f53\u7684\u4ee3\u7801\u793a\u4f8b\u4f9b\u53c2\u8003\u3002<\/p>\n

\u4ec0\u4e48\u662fACL\uff1f<\/h3>\n

\u5728\u4f20\u7edf\u7684Linux\u6743\u9650\u7ba1\u7406\u4e2d\uff0c\u6587\u4ef6\u548c\u76ee\u5f55\u7684\u6743\u9650\u7531\u6240\u6709\u8005\u3001\u6240\u5c5e\u7ec4\u548c\u5176\u4ed6\u7528\u6237\u4e09\u4e2a\u8eab\u4efd\u6765\u51b3\u5b9a\u3002\u7136\u800c\uff0c\u5728\u67d0\u4e9b\u60c5\u51b5\u4e0b\uff0c\u8fd9\u79cd\u7c97\u7c92\u5ea6\u7684\u6743\u9650\u63a7\u5236\u53ef\u80fd\u65e0\u6cd5\u6ee1\u8db3\u7528\u6237\u7684\u9700\u6c42\u3002\u8fd9\u65f6\u5019\u5c31\u53ef\u4ee5\u501f\u52a9ACL\u6765\u505a\u66f4\u7ec6\u81f4\u7684\u6743\u9650\u7ba1\u7406\u3002<\/p>\n

ACL\u5141\u8bb8\u7528\u6237\u4e3a\u7279\u5b9a\u7528\u6237\u6216\u7528\u6237\u7ec4\u8bbe\u7f6e\u7279\u5b9a\u6743\u9650\uff0c\u5305\u62ec\u8bfb\u53d6\u3001\u5199\u5165\u3001\u6267\u884c\u7b49\u3002\u901a\u8fc7ACL\uff0c\u7528\u6237\u53ef\u4ee5\u66f4\u7cbe\u786e\u5730\u63a7\u5236\u5bf9\u6587\u4ef6\u548c\u76ee\u5f55\u7684\u8bbf\u95ee\u6743\u9650\uff0c\u63d0\u9ad8\u6587\u4ef6\u7684\u5b89\u5168\u6027\u3002<\/p>\n

\u5b89\u88c5ACL\u5de5\u5177<\/h3>\n

\u5927\u591a\u6570Linux\u53d1\u884c\u7248\u90fd\u81ea\u5e26\u4e86ACL\u5de5\u5177\uff0c\u4f46\u5982\u679c\u60a8\u7684\u7cfb\u7edf\u6ca1\u6709\u5b89\u88c5\uff0c\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\u6765\u5b89\u88c5\uff1a<\/p>\n

sudo apt-get install acl    # \u5bf9\u4e8eDebian\/Ubuntu\u7cfb\u7edf\nsudo yum install acl        # \u5bf9\u4e8eCentOS\/RHEL\u7cfb\u7edf<\/pre>\n
  \u767b\u5f55\u540e\u590d\u5236   <\/p>\n
\u5b89\u88c5\u5b8c\u6210\u540e\uff0c\u60a8\u5c31\u53ef\u4ee5\u5f00\u59cb\u4f7f\u7528ACL\u5bf9\u6587\u4ef6\u548c\u76ee\u5f55\u8fdb\u884c\u6743\u9650\u63a7\u5236\u4e86\u3002<\/p>\n
\u8bbe\u7f6eACL\u793a\u4f8b<\/h3>\n
    \n
  1. \u4e3a\u7279\u5b9a\u7528\u6237\u8bbe\u7f6eACL<\/strong><\/li>\n<\/ol>\n
    \u5047\u8bbe\u6211\u4eec\u8981\u8bbe\u7f6e\u4e00\u4e2a\u540d\u4e3aexample.txt\u7684\u6587\u4ef6\uff0c\u53ea\u6709user1\u7528\u6237\u624d\u80fd\u8bfb\u5199\u8fd9\u4e2a\u6587\u4ef6\uff0c\u5176\u4ed6\u7528\u6237\u53ea\u80fd\u8bfb\u53d6\u3002\u9996\u5148\uff0c\u6211\u4eec\u53ef\u4ee5\u4f7f\u7528setfacl\u547d\u4ee4\u6765\u8bbe\u7f6eACL\uff1a<\/p>\n
    setfacl -m u:user1:rw example.txt<\/pre>\n
      \u767b\u5f55\u540e\u590d\u5236   <\/p>\n
    \u8fd9\u6761\u547d\u4ee4\u8868\u793a\u4e3aexample.txt\u6587\u4ef6\u7684\u7528\u6237user1\u8bbe\u7f6e\u8bfb\u5199\u6743\u9650\u3002<\/p>\n
      \n
    1. \u4e3a\u7279\u5b9a\u7528\u6237\u7ec4\u8bbe\u7f6eACL<\/strong><\/li>\n<\/ol>\n
      \u5982\u679c\u6211\u4eec\u60f3\u8ba9\u67d0\u4e2a\u7528\u6237\u7ec4\u62e5\u6709\u5bf9\u4e00\u4e2a\u76ee\u5f55\u7684\u5b8c\u5168\u8bbf\u95ee\u6743\u9650\uff0c\u53ef\u4ee5\u4f7f\u7528\u5982\u4e0b\u547d\u4ee4\uff1a<\/p>\n
      setfacl -m g:group1:rwx \/path\/to\/directory<\/pre>\n
        \u767b\u5f55\u540e\u590d\u5236   <\/p>\n
      \u8fd9\u6761\u547d\u4ee4\u8868\u793a\u4e3a\/path\/to\/directory\u76ee\u5f55\u7684\u7528\u6237\u7ec4group1\u8bbe\u7f6e\u8bfb\u3001\u5199\u3001\u6267\u884c\u6743\u9650\u3002<\/p>\n
        \n
      1. \u67e5\u770bACL<\/strong><\/li>\n<\/ol>\n
        \u8981\u67e5\u770b\u7279\u5b9a\u6587\u4ef6\u6216\u76ee\u5f55\u7684ACL\u8bbe\u7f6e\uff0c\u53ef\u4ee5\u4f7f\u7528getfacl\u547d\u4ee4\uff1a<\/p>\n
        getfacl example.txt<\/pre>\n
          \u767b\u5f55\u540e\u590d\u5236   <\/p>\n
        \u8fd9\u5c06\u663e\u793a\u51faexample.txt\u6587\u4ef6\u7684ACL\u4fe1\u606f\uff0c\u5305\u62ec\u7528\u6237\u548c\u7528\u6237\u7ec4\u7684\u6743\u9650\u3002<\/p>\n
        ACL\u7684\u5e38\u7528\u64cd\u4f5c<\/h3>\n
        \u9664\u4e86\u4e0a\u8ff0\u793a\u4f8b\u5916\uff0cACL\u8fd8\u5177\u6709\u8bb8\u591a\u5176\u4ed6\u5e38\u7528\u64cd\u4f5c\uff0c\u6bd4\u5982\u4fee\u6539ACL\u3001\u79fb\u9664ACL\u3001\u5e94\u7528ACL\u5230\u5b50\u76ee\u5f55\u7b49\u3002\u4ee5\u4e0b\u662f\u4e00\u4e9b\u5e38\u7528\u7684ACL\u64cd\u4f5c\uff1a<\/p>\n
          \n
        • \u4fee\u6539ACL<\/strong><\/li>\n<\/ul>\n
          setfacl -m u:user1:rx example.txt   # \u4e3a\u7528\u6237user1\u6dfb\u52a0\u8bfb\u53d6\u548c\u6267\u884c\u6743\u9650<\/pre>\n
            \u767b\u5f55\u540e\u590d\u5236   <\/p>\n
            \n
          • \u79fb\u9664ACL<\/strong><\/li>\n<\/ul>\n
            setfacl -x u:user1 example.txt      # \u79fb\u9664\u7528\u6237user1\u5bf9example.txt\u7684ACL\u8bbe\u7f6e<\/pre>\n
              \u767b\u5f55\u540e\u590d\u5236   <\/p>\n
              \n
            • \u5e94\u7528ACL\u5230\u5b50\u76ee\u5f55<\/strong><\/li>\n<\/ul>\n
              setfacl -R -m g:group1:rwx \/path\/to\/directory   # \u9012\u5f52\u5e94\u7528ACL\u5230\u76ee\u5f55\u53ca\u5176\u5b50\u76ee\u5f55<\/pre>\n
                \u767b\u5f55\u540e\u590d\u5236   <\/p>\n
              \u603b\u7ed3<\/h3>\n
              \u901a\u8fc7\u4f7f\u7528ACL\uff0c\u60a8\u53ef\u4ee5\u66f4\u52a0\u7075\u6d3b\u5730\u63a7\u5236\u6587\u4ef6\u548c\u76ee\u5f55\u7684\u8bbf\u95ee\u6743\u9650\uff0c\u63d0\u9ad8\u7cfb\u7edf\u7684\u5b89\u5168\u6027\u3002\u672c\u6587\u4ecb\u7ecd\u4e86ACL\u7684\u57fa\u672c\u6982\u5ff5\u3001\u5b89\u88c5\u65b9\u6cd5\u4ee5\u53ca\u5e38\u7528\u7684ACL\u64cd\u4f5c\uff0c\u5e0c\u671b\u80fd\u5e2e\u52a9\u60a8\u66f4\u597d\u5730\u4fdd\u62a4\u60a8\u7684\u6587\u4ef6\u548c\u76ee\u5f55\u3002<\/p>\n
              \u5728Linux\u7cfb\u7edf\u4e2d\uff0cACL\u662f\u4e00\u4e2a\u975e\u5e38\u5f3a\u5927\u7684\u5de5\u5177\uff0c\u53ef\u4ee5\u5e2e\u52a9\u7528\u6237\u5b9e\u73b0\u66f4\u7ec6\u81f4\u7684\u6743\u9650\u7ba1\u7406\u3002\u5982\u679c\u60a8\u6709\u9700\u8981\u5bf9\u6587\u4ef6\u6743\u9650\u8fdb\u884c\u66f4\u7cbe\u786e\u63a7\u5236\u7684\u60c5\u51b5\uff0c\u4e0d\u59a8\u5c1d\u8bd5\u4f7f\u7528ACL\u6765\u8fbe\u5230\u60a8\u7684\u76ee\u7684\u3002<\/p>\n
              \u4ee5\u4e0a\u5c31\u662f\u6307\u5357\uff1a\u4f7f\u7528Linux ACL\u4fdd\u62a4\u60a8\u7684\u6587\u4ef6\u548c\u76ee\u5f55\u7684\u8be6\u7ec6\u5185\u5bb9\uff0c\u66f4\u591a\u8bf7\u5173\u6ce8\u7c73\u4e91\u5176\u5b83\u76f8\u5173\u6587\u7ae0\uff01<\/p>\n","protected":false},"excerpt":{"rendered":"
              \u5728Linux\u64cd\u4f5c\u7cfb\u7edf\u4e2d\uff0cACL\uff08Access Control List\uff09\u662f\u4e00\u79cd\u975e\u5e38\u5f3a\u5927\u7684\u5de5\u5177\uff0c\u53ef\u4ee5\u7528\u6765\u66f4\u7cbe\u7ec6\u5730\u63a7\u5236\u5bf9\u6587\u4ef6\u548c\u76ee\u5f55\u7684\u8bbf\u95ee\u6743\u9650\u3002\u901a\u8fc7ACL\uff0c\u7528\u6237\u53ef\u4ee5\u4e3a\u7279\u5b9a\u7684\u7528\u6237\u6216\u7528\u6237\u7ec4\u8bbe\u7f6e\u7279\u5b9a\u7684\u6743\u9650\uff0c\u800c\u4e0d\u4ec5\u4ec5\u5c40\u9650\u4e8e\u4f20\u7edf\u7684\u7528\u6237\u548c\u7ec4\u7684\u8bfb\u3001\u5199\u3001\u6267\u884c\u6743\u9650\u3002\u672c\u6587\u5c06\u4e3a\u60a8\u4ecb\u7ecd\u5982\u4f55\u4f7f\u7528ACL\u6765\u4fdd\u62a4\u60a8\u7684\u6587\u4ef6\u548c\u76ee\u5f55\uff0c\u540c\u65f6\u63d0\u4f9b\u5177\u4f53\u7684\u4ee3\u7801\u793a\u4f8b\u4f9b\u53c2\u8003\u3002 \u4ec0\u4e48\u662fACL\uff1f \u5728\u4f20\u7edf\u7684Linux\u6743\u9650\u7ba1\u7406\u4e2d\uff0c\u6587\u4ef6\u548c\u76ee\u5f55\u7684\u6743\u9650\u7531\u6240\u6709\u8005\u3001\u6240\u5c5e\u7ec4\u548c\u5176\u4ed6\u7528\u6237\u4e09\u4e2a\u8eab\u4efd\u6765\u51b3\u5b9a\u3002\u7136\u800c\uff0c\u5728\u67d0\u4e9b\u60c5\u51b5\u4e0b\uff0c\u8fd9\u79cd\u7c97\u7c92\u5ea6\u7684\u6743\u9650\u63a7\u5236\u53ef\u80fd\u65e0\u6cd5\u6ee1\u8db3\u7528\u6237\u7684\u9700\u6c42\u3002\u8fd9\u65f6\u5019\u5c31\u53ef\u4ee5\u501f\u52a9ACL\u6765\u505a\u66f4\u7ec6\u81f4\u7684\u6743\u9650\u7ba1\u7406\u3002 ACL\u5141\u8bb8\u7528\u6237\u4e3a\u7279\u5b9a\u7528\u6237\u6216\u7528\u6237\u7ec4\u8bbe\u7f6e\u7279\u5b9a\u6743\u9650\uff0c\u5305\u62ec\u8bfb\u53d6\u3001\u5199\u5165\u3001\u6267\u884c\u7b49\u3002\u901a\u8fc7ACL\uff0c\u7528\u6237\u53ef\u4ee5\u66f4\u7cbe\u786e\u5730\u63a7\u5236\u5bf9\u6587\u4ef6\u548c\u76ee\u5f55\u7684\u8bbf\u95ee\u6743\u9650\uff0c\u63d0\u9ad8\u6587\u4ef6\u7684\u5b89\u5168\u6027\u3002 \u5b89\u88c5ACL\u5de5\u5177 \u5927\u591a\u6570Linux\u53d1\u884c\u7248\u90fd\u81ea\u5e26\u4e86ACL\u5de5\u5177\uff0c\u4f46\u5982\u679c\u60a8\u7684\u7cfb\u7edf\u6ca1\u6709\u5b89\u88c5\uff0c\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\u6765\u5b89\u88c5\uff1a sudo apt-get install acl # \u5bf9\u4e8eDebian\/Ubuntu\u7cfb\u7edf sudo yum install acl # \u5bf9\u4e8eCentOS\/RHEL\u7cfb\u7edf \u767b\u5f55\u540e\u590d\u5236 \u5b89\u88c5\u5b8c\u6210\u540e\uff0c\u60a8\u5c31\u53ef\u4ee5\u5f00\u59cb\u4f7f\u7528ACL\u5bf9\u6587\u4ef6\u548c\u76ee\u5f55\u8fdb\u884c\u6743\u9650\u63a7\u5236\u4e86\u3002 \u8bbe\u7f6eACL\u793a\u4f8b \u4e3a\u7279\u5b9a\u7528\u6237\u8bbe\u7f6eACL \u5047\u8bbe\u6211\u4eec\u8981\u8bbe\u7f6e\u4e00\u4e2a\u540d\u4e3aexample.txt\u7684\u6587\u4ef6\uff0c\u53ea\u6709user1\u7528\u6237\u624d\u80fd\u8bfb\u5199\u8fd9\u4e2a\u6587\u4ef6\uff0c\u5176\u4ed6\u7528\u6237\u53ea\u80fd\u8bfb\u53d6\u3002\u9996\u5148\uff0c\u6211\u4eec\u53ef\u4ee5\u4f7f\u7528setfacl\u547d\u4ee4\u6765\u8bbe\u7f6eACL\uff1a setfacl -m u:user1:rw example.txt \u767b\u5f55\u540e\u590d\u5236 \u8fd9\u6761\u547d\u4ee4\u8868\u793a\u4e3aexample.txt\u6587\u4ef6\u7684\u7528\u6237user1\u8bbe\u7f6e\u8bfb\u5199\u6743\u9650\u3002 \u4e3a\u7279\u5b9a\u7528\u6237\u7ec4\u8bbe\u7f6eACL \u5982\u679c\u6211\u4eec\u60f3\u8ba9\u67d0\u4e2a\u7528\u6237\u7ec4\u62e5\u6709\u5bf9\u4e00\u4e2a\u76ee\u5f55\u7684\u5b8c\u5168\u8bbf\u95ee\u6743\u9650\uff0c\u53ef\u4ee5\u4f7f\u7528\u5982\u4e0b\u547d\u4ee4\uff1a setfacl -m g:group1:rwx \/path\/to\/directory \u767b\u5f55\u540e\u590d\u5236 \u8fd9\u6761\u547d\u4ee4\u8868\u793a\u4e3a\/path\/to\/directory\u76ee\u5f55\u7684\u7528\u6237\u7ec4group1\u8bbe\u7f6e\u8bfb\u3001\u5199\u3001\u6267\u884c\u6743\u9650\u3002 \u67e5\u770bACL \u8981\u67e5\u770b\u7279\u5b9a\u6587\u4ef6\u6216\u76ee\u5f55\u7684ACL\u8bbe\u7f6e\uff0c\u53ef\u4ee5\u4f7f\u7528getfacl\u547d\u4ee4\uff1a getfacl example.txt \u767b\u5f55\u540e\u590d\u5236 \u8fd9\u5c06\u663e\u793a\u51faexample.txt\u6587\u4ef6\u7684ACL\u4fe1\u606f\uff0c\u5305\u62ec\u7528\u6237\u548c\u7528\u6237\u7ec4\u7684\u6743\u9650\u3002 ACL\u7684\u5e38\u7528\u64cd\u4f5c \u9664\u4e86\u4e0a\u8ff0\u793a\u4f8b\u5916\uff0cACL\u8fd8\u5177\u6709\u8bb8\u591a\u5176\u4ed6\u5e38\u7528\u64cd\u4f5c\uff0c\u6bd4\u5982\u4fee\u6539ACL\u3001\u79fb\u9664ACL\u3001\u5e94\u7528ACL\u5230\u5b50\u76ee\u5f55\u7b49\u3002\u4ee5\u4e0b\u662f\u4e00\u4e9b\u5e38\u7528\u7684ACL\u64cd\u4f5c\uff1a \u4fee\u6539ACL setfacl -m u:user1:rx example.txt # \u4e3a\u7528\u6237user1\u6dfb\u52a0\u8bfb\u53d6\u548c\u6267\u884c\u6743\u9650 \u767b\u5f55\u540e\u590d\u5236 […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8],"tags":[],"class_list":["post-17481","post","type-post","status-publish","format-standard","hentry","category-os"],"_links":{"self":[{"href":"https:\/\/fwq.ai\/blog\/wp-json\/wp\/v2\/posts\/17481","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fwq.ai\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fwq.ai\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fwq.ai\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fwq.ai\/blog\/wp-json\/wp\/v2\/comments?post=17481"}],"version-history":[{"count":0,"href":"https:\/\/fwq.ai\/blog\/wp-json\/wp\/v2\/posts\/17481\/revisions"}],"wp:attachment":[{"href":"https:\/\/fwq.ai\/blog\/wp-json\/wp\/v2\/media?parent=17481"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fwq.ai\/blog\/wp-json\/wp\/v2\/categories?post=17481"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fwq.ai\/blog\/wp-json\/wp\/v2\/tags?post=17481"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}