Hi! I'm trying to use the unBALANCE plug in which is telling me that before I complete the operation I have in mind, I should run Docker Safe New Permissions (which is installed as part of CA).

 

I would like to know:

 

1. What does "Docker Safe New Permissions" do?

2. Is it safe for my data and why?

3. Why would permissions on user data ever need to be fixed?

 

Thanks!

Edited August 26, 20178 yr by ksignorini

I know for certain that one of the things it does is leave alone the permissions on the appdata Share where having the correct permissions can matter to the docker apps..   Not sure if there are any other Shares/folders that are also left alone.

But what about for regular user shares?

This utility will restore standard unRaid permissions to all shares and files without touching any of the APPDATA shares for docker applications.

(Many times, a docker application has specific requirements for its ownership / permissions on the files contained within its appdata, and the standard New Permissions tool will change these, possibly rendering the docker application inoperable.)

You should use this tool in case a misconfigured docker application (notably CouchPotato or Sonarr / SickBeard) has written media files to your array with the wrong permissions, and you find yourself unable to modify / delete those files.

5 hours ago, Squid said:

 

 

 

So if I run this, is there any chance that it screws up access to user data for any of my users? I know it doesn't touch APPDATA, and I know what it says about Couch, Sonarr, Sick, etc. but none of the files I'm moving with unBALANCE are from those apps.

 

I want to move a Time Machine backup from one drive to another with unBALANCE and unBALANCE says I should run this permissions fix first.

 

Is there any risk in running a permissions fix?

Edited August 27, 20178 yr by ksignorini

Why don't you run 

 

ls -la 

 

on your data first and find out what the permissions are already and who owns them, then we can talk you through what (if any) changes would occur.

Fair enough.

 

Anything I copy from my Mac to my user folder gets:

 

--rw-r--r-- me  users

 

My Time Machine backup has a sparsebundle that's set:

 

 drwx--S--- 1 me users

 

Inside the sparesbundle is the "bands" directory where all the data is stored. Each of the bands looks like this:

 

-rw------- me users

 

This is how unRAID seems to default all of these things. I haven't changed any permissions by hand.

I bit the bullet and hit the button. It's going through now. On initial inspection, it seems to have fixed some problems I was having in a shared share (among two assigned users) such that now, they can both edit documents in the share (before they couldn't). OP on that is here: 

 

 

Too bad the tool doesn't let you pick which share to apply this to so it's easier to test.

 

Thanks!

 

4 hours ago, ksignorini said:

Too bad the tool doesn't let you pick which share

newperms /mnt/user/NameOfShare

39 minutes ago, Squid said:

 

newperms /mnt/user/NameOfShare

 

 

Huh. Is this documented somewhere?

You can exclude shares in the GUI.

1 minute ago, CHBMB said:

You can exclude shares in the GUI.

 

Not with the Docker Safe version. The "old" version (comes with unRAID) you can but there is no dropdown on the Docker Safe version.

13 minutes ago, CHBMB said:

 

Totally missed that.

 

But it would be great if there was a dropdown which gave you an inclusion list. So you could run it on just one or two directories from the GUI.

 

Thanks!

15 hours ago, ksignorini said:

 

Huh. Is this documented somewhere?

In the forums around here with a lot of searching.

15 hours ago, ksignorini said:

 

Not with the Docker Safe version. The "old" version (comes with unRAID) you can but there is no dropdown on the Docker Safe version.

Never noticed when the share list came into the tool that comes with unRaid.  Probably 6.3 something which is way after when the tool was created.

On 8/27/2017 at 4:15 PM, Squid said:

 

newperms /mnt/user/NameOfShare

 

I love you

On 8/27/2017 at 2:15 PM, Squid said:

 

newperms /mnt/user/NameOfShare

 

This is great, I was going to attempt to recreate the Docker Safe New Perms script and run it on a schedule for my Dropbox share... now I can just throw this one line into the User Scripts plugin!

 

Link to the source code if anyone is interested:

https://github.com/limetech/dynamix/blob/master/plugins/dynamix/scripts/newperms

On 7/16/2020 at 8:49 AM, robkurzd said:

I love you

+1, love you @Squid

Edited October 30, 20205 yr by groot-stuff

how do you run this from the gui, or do you?   I've been all over my system and can't find a place to run this.  I've run the fix common problems plugin several times and don't see this as an option.   I see the command above, is that the only way to run it?

 

 

Nevermind, I found it over in tools.

Edited February 10, 20215 yr by TimV

how can i make a user skript runing daily on one share. 

tried this: 

 

#!/bin/bash
newperms /mnt/user/Video

 

 

but that throws error:

Script location: /tmp/user.scripts/tmpScripts/Reset permissions on share Video/script
Note that closing this window will abort the execution of this script
/tmp/user.scripts/tmpScripts/Reset permissions on share Video/script: line 2: newperms: command not found

 

im certain its a easy task for someone who knows  

Have you tried giving the full path to the newperms command in case it is not on the search path at that point?

 

Ty, got it to work now.

 

the reason for wanting this to run shedualed is when radarr populates the share tinymm cant write to the folder.

but after runing newperms the problem is gone.

 

 

24 minutes ago, chFresh said:

the reason for wanting this to run shedualed is when radarr populates the share tinymm cant write to the folder.

but after runing newperms the problem is gone.

The correct solution is to configure the permissions that radar sets in the first place so that this is not needed.

That sounds much smarter.
could you please point me in the right direction ?

12 minutes ago, chFresh said:

That sounds much smarter.
could you please point me in the right direction ?

I don't use radarr - I suggest you ask in it's support thread (by using the Support option when you right-click on the container's icon) if the answer is not already there.