Sudo and limited rights

[Thomas Moschny]

2011/10/31 Patrick Boutilier <boutilpj at ednet.ns.ca>:
> [...]
> setfacl -R -m u:$user:r /var/log/
> setfacl -d -R -m u:$user:r /var/log/

You also need to set x bits (note capital X):
setfacl -R -m u:$user:rX /var/log/
setfacl -d -R -m u:$user:rX /var/log/

- Thomas