In Windows they are used for a long time already, but most Linux-users probably don't even know that their system supports them too. Access Control Lists (ACLs) extend the regular permissions we all know with the possibility to give permissions for specific users/groups.

Before we configure SAMBA we should make sure that the file-systems that we share to Windows users will support the Windows style of Access Control Lists. Linux file-system security will allow for rights to be assigned to one user, one group and everyone else. Windows will allow multiple users and groups in the access control lists.

If user and group management has you in a quandary, it's time to take the advanced filesystem security class at the ACLU.

How do I setup NFS v4.0 distributed file system access server under CentOS / RHEL v5.x for sharing files with UNIX and Linux workstations? How to export a directory with NFSv4? How to mount a directory with NFSv4?

If you read my article "Get to know Linux: File permissions" you know that it's possible, out of the box, to control who can access a file and what they can do with it. This helps to make Linux a fairly secure system. But did you know you can take even further control of that system with the help of Access Control Lists?

ACLs and extended attributes for files are simple and easy to use in Linux, and can go a long way in securing files. Vincent Danen goes over some of the basic file protection enhancements provided by the Linux kernel.

A vulnerability in the creation of symbolic links (symlinks) in the free Samba file and printer server can be exploited to attain access to files outside of predefined paths. Attackers can even get access to the system's root directory (/). To exploit the flaw (directory traversing), attackers first have to have an account on the Samba server that includes write access to at least one share.

Linbox Directory Server is an enterprise directory platform based on LDAP designed to manage identities, access control informations, policies, application settings and user profiles.

Samba 4, currently the alpha development of Active Directory for Linux and Unix, has been in parallel development with Samba 3. Allison says "The ultimate goal for Samba 4 will be to merge with the Samba 3 file server code, something that is called "Frankie" internally, after Frankenstein, the merging of the body parts...