How to enable ACLs for the /home partition?

In Linux systems, enabling Access Control Lists (ACL) for the /home partition enhances the management of file and directory permissions. The following steps guide you through enabling ACL for the /home partition:

Step 1: Check if the File System Supports ACL

First, verify if the file system supporting the /home partition has ACL enabled. This can be done by checking the mount options:

bash
mount | grep /home

If the output includes acl, it indicates that ACL is enabled. If not, proceed to the next step.

Step 2: Modify the File System Mount Options

If ACL is not enabled, you need to edit the /etc/fstab file to add ACL support. Use a text editor such as vim or nano:

bash
sudo nano /etc/fstab

Locate the line containing the /home partition, which typically looks like:

shell
UUID=XXXX-XXXX /home           ext4    defaults        0       2

Add acl to the mount options, resulting in:

shell
UUID=XXXX-XXXX /home           ext4    defaults,acl    0       2

Save and close the file.

Step 3: Remount the File System

Next, remount the /home partition to apply the changes. Use the following command:

bash
sudo mount -o remount /home

Step 4: Verify ACL is Enabled

After remounting, verify that ACL is enabled by using the mount command:

bash
mount | grep /home

Ensure the output includes acl.

Example: Setting ACL Rules

Once ACL is enabled, you can start setting ACL rules for specific files or directories. For example, to grant user john read access to the /home/sarah/docs directory, use the following command:

bash
setfacl -m u:john:r /home/sarah/docs

This command sets an ACL rule that allows user john to read the /home/sarah/docs directory.

By following these steps, you can successfully enable ACL for the /home partition and use ACL to manage file and directory permissions in detail. This is particularly useful in multi-user environments, ensuring the security and access control of files and directories.