# $HOME facl is always reset in 21.05

**URL:** https://discourse.nixos.org/t/home-facl-is-always-reset-in-21-05/13408
**Category:** Help
**Created:** [June 2, 2021, 6:52am UTC](https://discourse.nixos.org/t/home-facl-is-always-reset-in-21-05/13408 "2021-06-02T06:52:33Z")
**Posts on this page:** 7
**Page:** 1

<div class="post-metadata">

### Author: ![Vonfry](https://discourse.nixos.org/user_avatar/discourse.nixos.org/vonfry/32/910_2.png) [@Vonfry](https://discourse.nixos.org/u/Vonfry)
#### Post date: [June 2, 2021, 6:52am UTC](https://discourse.nixos.org/t/home-facl-is-always-reset-in-21-05/13408/1 "2021-06-02T06:52:33Z")

</div>

I know it is a new feature in 21.05 to reset user home dir facl.

But I want to add a facl like `setfacl -m u:user:x ~` and make it existing after rebuild nixos.

Is there an options for nixos to do this? `users.users.<name>.subUid*` is not suitable.

---

<div class="post-metadata">

### Author: ![aanderse](https://discourse.nixos.org/user_avatar/discourse.nixos.org/aanderse/32/1420_2.png) [@aanderse](https://discourse.nixos.org/u/aanderse)
#### Post date: [June 2, 2021, 11:09am UTC](https://discourse.nixos.org/t/home-facl-is-always-reset-in-21-05/13408/2 "2021-06-02T11:09:39Z")

</div>

Set `users.users.<name>.createHome = false;` and I suspect that will fix your problem.

---

<div class="post-metadata">

### Author: ![Vonfry](https://discourse.nixos.org/user_avatar/discourse.nixos.org/vonfry/32/910_2.png) [@Vonfry](https://discourse.nixos.org/u/Vonfry)
#### Post date: [June 3, 2021, 12:49am UTC](https://discourse.nixos.org/t/home-facl-is-always-reset-in-21-05/13408/3 "2021-06-03T00:49:12Z")

</div>

`users.users.<name>.createHome` is already `false` which is the default value. So it cannot solve the problem.

---

<div class="post-metadata">

### Author: ![Vonfry](https://discourse.nixos.org/user_avatar/discourse.nixos.org/vonfry/32/910_2.png) [@Vonfry](https://discourse.nixos.org/u/Vonfry)
#### Post date: [June 8, 2021, 5:20am UTC](https://discourse.nixos.org/t/home-facl-is-always-reset-in-21-05/13408/4 "2021-06-08T05:20:09Z")

</div>

Now, I use `system.activationScripts` to fix this problem.

---

<div class="post-metadata">

### Author: ![aanderse](https://discourse.nixos.org/user_avatar/discourse.nixos.org/aanderse/32/1420_2.png) [@aanderse](https://discourse.nixos.org/u/aanderse)
#### Post date: [June 8, 2021, 9:32am UTC](https://discourse.nixos.org/t/home-facl-is-always-reset-in-21-05/13408/5 "2021-06-08T09:32:12Z")

</div>

If `createHome` is set to `false` then what specifically is changing the ACLs on your home directory?

---

<div class="post-metadata">

### Author: ![Vonfry](https://discourse.nixos.org/user_avatar/discourse.nixos.org/vonfry/32/910_2.png) [@Vonfry](https://discourse.nixos.org/u/Vonfry)
#### Post date: [June 9, 2021, 1:30am UTC](https://discourse.nixos.org/t/home-facl-is-always-reset-in-21-05/13408/7 "2021-06-09T01:30:10Z")

</div>

I run `setfacl -m u:sddm:x ~/` after `nixos-rebuild switch` and `getfacl ~/` outs `user:sddm:--x`.

Reboot system and now I run `getfacl ~/`, it prints `user:sddm:--x #effective:---` and acl for user of `qemu-libvirtd` is same.

---

<div class="post-metadata">

### Author: ![aanderse](https://discourse.nixos.org/user_avatar/discourse.nixos.org/aanderse/32/1420_2.png) [@aanderse](https://discourse.nixos.org/u/aanderse)
#### Post date: [June 9, 2021, 3:14am UTC](https://discourse.nixos.org/t/home-facl-is-always-reset-in-21-05/13408/8 "2021-06-09T03:14:23Z")

</div>

I have had a similar issue on `/var/log/httpd` for a while now.

I set ACLs using `systemd.tmpfiles.rules` (in an attempt to override the `tmpfiles` rules that NixOS provides) but they always end up like you have described and I need to manually run `setfacl`.

I’d love to know what I’m doing wrong here…