Text-only	Table of Contents (frame/ no frame)
(10) Managing ACLs

Managing ACLs

ACLs are all managed by various options to the fs command. Wrapper scripts or aliases for some of these may be available

fs_listacl (la): Displays the ACLs for one or more named files or directories. The default is "." (current directory).
fs_setacl (sa): Set the ACLs for one or more named directories. Multiple user permission pairs may be listed Users are removed from the list by specifying none as the permission. Users are added to the existing ACL unless the -clear flag is also given.
fs_copyacl (ca): Copy the ACL from one directory to another. This allows a complex ACL to be set on a template directory and then duplicated.

Negative ACLs

Access control is a logical OR of the user:permission pairs. Negative permissions can also be specified with the -negative flag to fs setacl. This allows such settings as "Any authenticated user in this cell (system:authuser), but not user 'bob'.

managing-acls.src last modified Apr 28, 2004

Introduction

Table of Contents
(frame/no frame)

Printable
(single file)