Skip to content

Commit

Permalink
minor #6518 Add details about chmod +a vs setfacl (pasdeloup)
Browse files Browse the repository at this point in the history
This PR was squashed before being merged into the 2.3 branch (closes #6518).

Discussion
----------

Add details about chmod +a vs setfacl

| Q             | A
| ------------- | ---
| Doc fix?      | yes
| New docs?     | no
| Applies to    | all
| Fixed tickets | no

chmod +a seems to be a MacOS X non standard feature so it's useless to ask everyone to try it before setfacl. Linux users should directly go for it (Internet is full of comments of people asking how to chmod +a on Ubuntu or CentOS).
Add also informations about NFS and setfacl: it's a common issue when deploying on production.

Commits
-------

f70c6c0 Add details about chmod +a vs setfacl
  • Loading branch information
wouterj committed May 5, 2016
2 parents 44bf2ab + f70c6c0 commit cb6a26c
Showing 1 changed file with 12 additions and 10 deletions.
22 changes: 12 additions & 10 deletions book/installation.rst
Original file line number Diff line number Diff line change
Expand Up @@ -229,10 +229,9 @@ If there are any issues, correct them now before moving on.
its user to be the same as your CLI user (e.g. for Apache, update the ``User``
and ``Group`` values).

**2. Using ACL on a system that supports chmod +a**
**2. Using ACL on a system that supports chmod +a (MacOS X)**

Many systems allow you to use the ``chmod +a`` command. Try this first,
and if you get an error - try the next method. This uses a command to
MacOS X allows you to use the ``chmod +a`` command. This uses a command to
try to determine your web server user and set it as ``HTTPDUSER``:

.. code-block:: bash
Expand All @@ -244,14 +243,12 @@ If there are any issues, correct them now before moving on.
$ sudo chmod +a "$HTTPDUSER allow delete,write,append,file_inherit,directory_inherit" app/cache app/logs
$ sudo chmod +a "`whoami` allow delete,write,append,file_inherit,directory_inherit" app/cache app/logs
**3. Using ACL on a system that supports setfacl (most Linux/BSD)**

**3. Using ACL on a system that does not support chmod +a**

Some systems don't support ``chmod +a``, but do support another utility
called ``setfacl``. You may need to `enable ACL support`_ on your partition
and install setfacl before using it (as is the case with Ubuntu). This
uses a command to try to determine your web server user and set it as
``HTTPDUSER``:
Most Linux and BSD distributions don't support ``chmod +a``, but do support
another utility called ``setfacl``. You may need to `enable ACL support`_
on your partition and install setfacl before using it. This uses a command
to try to determine your web server user and set it as ``HTTPDUSER``:

.. code-block:: bash
Expand All @@ -261,6 +258,11 @@ If there are any issues, correct them now before moving on.
If this doesn't work, try adding ``-n`` option.

.. note::

setfacl isn't available on NFS mount points. However, setting cache
and logs over NFS is strongly not recommended for performance.

**4. Without using ACL**

If none of the previous methods work for you, change the umask so that the
Expand Down

0 comments on commit cb6a26c

Please sign in to comment.