"setfacl --restore" fails

Solution Verified - Updated -

Environment

  • Red Hat Enterprise Linux (RHEL) 6.8, 7.4
  • acl

Issue

Command setfacl --restore works fine in some directories and fails in others:

# setfacl --restore /path/to/a/file
setfacl: /path/to/a/file: Malformed access ACL `user::rwx,user:example:rwx,group::rwx,group:example:rwx,other::---': Missing or wrong entry at entry 28

Resolution

Update acl to:
- acl-2.2.49-7.el6_9.1 released with Advisory RHBA-2017:2501 for RHEL 6
- acl-2.2.51-14.el7 released with Advisory RHBA-2018:0772 for RHEL 7

Root Cause

When using setfacl --restore <aclfile> command, the command may fail when setting ACL because of the reading of unitialized memory, causing unexpected code path to be executed.

Backporting upstream commit 33f01b5d fixed the issue.

This solution is part of Red Hat’s fast-track publication program, providing a huge library of solutions that Red Hat engineers have created while supporting our customers. To give you the knowledge you need the instant it becomes available, these articles may be presented in a raw and unedited form.

Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.