diff options
Diffstat (limited to 'usr/src/man/man5/acl.5')
-rw-r--r-- | usr/src/man/man5/acl.5 | 92 |
1 files changed, 2 insertions, 90 deletions
diff --git a/usr/src/man/man5/acl.5 b/usr/src/man/man5/acl.5 index 24daabdd3d..d039a300e0 100644 --- a/usr/src/man/man5/acl.5 +++ b/usr/src/man/man5/acl.5 @@ -3,7 +3,7 @@ .\" The contents of this file are subject to the terms of the Common Development and Distribution License (the "License"). You may not use this file except in compliance with the License. .\" You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE or http://www.opensolaris.org/os/licensing. See the License for the specific language governing permissions and limitations under the License. .\" When distributing Covered Code, include this CDDL HEADER in each file and include the License file at usr/src/OPENSOLARIS.LICENSE. If applicable, add the following below this CDDL HEADER, with the fields enclosed by brackets "[]" replaced with your own identifying information: Portions Copyright [yyyy] [name of copyright owner] -.TH acl 5 "29 Sep 2008" "SunOS 5.11" "Standards, Environments, and Macros" +.TH ACL 5 "Sep 29, 2008" .SH NAME acl \- Access Control Lists .SH DESCRIPTION @@ -59,45 +59,37 @@ Each \fIacl_entry\fR contains one ACL entry. An ACL entry is represented by two or three colon-separated(\fB:\fR) fields. .sp .ne 2 -.mk .na \fB\fIuser\fR:[\fIuid\fR]:\fIperms\fR\fR .ad .RS 21n -.rt If \fIuid\fR blank, it represents the file owner. .RE .sp .ne 2 -.mk .na \fB\fIgroup\fR:[\fIgid\fR]:\fIperms\fR\fR .ad .RS 21n -.rt If \fIgid\fR is blank, it represents the owning group. .RE .sp .ne 2 -.mk .na \fB\fIother\fR:\fIperms\fR\fR .ad .RS 21n -.rt Represents the file other class. .RE .sp .ne 2 -.mk .na \fB\fImask\fR:\fIperms\fR\fR .ad .RS 21n -.rt Defines the \fBMAX\fR permission to hand out. .RE @@ -188,115 +180,95 @@ The permissions for verbose mode and their abbreviated form in parentheses for compact and positional mode are described as follows: .sp .ne 2 -.mk .na \fBread_data (\fBr\fR)\fR .ad .RS 24n -.rt Permission to read the data of the file .RE .sp .ne 2 -.mk .na \fBlist_directory (\fBr\fR)\fR .ad .RS 24n -.rt Permission to list the contents of a directory. .RE .sp .ne 2 -.mk .na \fBwrite_data (\fBw\fR)\fR .ad .RS 24n -.rt Permission to modify a file's data anywhere in the file's offset range. This includes the ability to grow the file or write to any arbitrary offset. .RE .sp .ne 2 -.mk .na \fBadd_file (\fBw\fR)\fR .ad .RS 24n -.rt Permission to add a new file to a directory. .RE .sp .ne 2 -.mk .na \fBappend_data (\fBp\fR)\fR .ad .RS 24n -.rt The ability to modify the file's data, but only starting at EOF. Currently, this permission is not supported. .RE .sp .ne 2 -.mk .na \fBadd_subdirectory (\fBp\fR)\fR .ad .RS 24n -.rt Permission to create a subdirectory to a directory. .RE .sp .ne 2 -.mk .na \fBread_xattr (\fBR\fR)\fR .ad .RS 24n -.rt The ability to read the extended attributes of a file or do a lookup in the extended attributes directory. .RE .sp .ne 2 -.mk .na \fBwrite_xattr (\fBW\fR)\fR .ad .RS 24n -.rt The ability to create extended attributes or write to the extended attributes directory. .RE .sp .ne 2 -.mk .na \fBexecute (\fBx\fR)\fR .ad .RS 24n -.rt Permission to execute a file. .RE .sp .ne 2 -.mk .na \fBread_attributes (\fBa\fR)\fR .ad .RS 24n -.rt The ability to read basic attributes (non-ACLs) of a file. Basic attributes are considered to be the stat level attributes. Allowing this access mask bit means that the entity can execute \fBls\fR(1) and \fBstat\fR(2). @@ -304,81 +276,67 @@ that the entity can execute \fBls\fR(1) and \fBstat\fR(2). .sp .ne 2 -.mk .na \fBwrite_attributes (\fBA\fR)\fR .ad .RS 24n -.rt Permission to change the times associated with a file or directory to an arbitrary value. .RE .sp .ne 2 -.mk .na \fBdelete (\fBd\fR)\fR .ad .RS 24n -.rt Permission to delete the file. .RE .sp .ne 2 -.mk .na \fBdelete_child (\fBD\fR)\fR .ad .RS 24n -.rt Permission to delete a file within a directory. .RE .sp .ne 2 -.mk .na \fBread_acl (\fBc\fR)\fR .ad .RS 24n -.rt Permission to read the ACL. .RE .sp .ne 2 -.mk .na \fBwrite_acl (\fBC\fR)\fR .ad .RS 24n -.rt Permission to write the ACL or the ability to execute \fBchmod\fR(1) or \fBsetfacl\fR(1). .RE .sp .ne 2 -.mk .na \fBwrite_owner (\fBo\fR)\fR .ad .RS 24n -.rt Permission to change the owner or the ability to execute \fBchown\fR(1) or \fBchgrp\fR(1). .RE .sp .ne 2 -.mk .na \fBsynchronize (\fBs\fR)\fR .ad .RS 24n -.rt Permission to access a file locally at the server with synchronous reads and writes. Currently, this permission is not supported. .RE @@ -388,34 +346,28 @@ writes. Currently, this permission is not supported. The following inheritance flags are supported by NFSv4: .sp .ne 2 -.mk .na \fBfile_inherit (\fBf\fR)\fR .ad .RS 26n -.rt Inherit to all newly created files in a directory. .RE .sp .ne 2 -.mk .na \fBdir_inherit (\fBd\fR)\fR .ad .RS 26n -.rt Inherit to all newly created directories in a directory. .RE .sp .ne 2 -.mk .na \fBinherit_only (\fBi\fR)\fR .ad .RS 26n -.rt Placed on a directory, but does not apply to the directory itself, only to newly created created files and directories. This flag requires file_inherit and or dir_inherit to indicate what to inherit. @@ -423,12 +375,10 @@ and or dir_inherit to indicate what to inherit. .sp .ne 2 -.mk .na \fBno_propagate (\fBn\fR)\fR .ad .RS 26n -.rt Placed on directories and indicates that ACL entries should only be inherited one level of the tree. This flag requires file_inherit and or dir_inherit to indicate what to inherit. @@ -436,47 +386,39 @@ indicate what to inherit. .sp .ne 2 -.mk .na \fBsuccessful_access (\fBS)\fR)\fR .ad .RS 26n -.rt Indicates if an alarm or audit record should be initiated upon successful accesses. Used with audit/alarm ACE types. .RE .sp .ne 2 -.mk .na \fBfailed_access (\fBF\fR)\fR .ad .RS 26n -.rt Indicates if an alarm or audit record should be initiated when access fails. Used with audit/alarm ACE types. .RE .sp .ne 2 -.mk .na \fBinherited (\fBI\fR)\fR .ad .RS 26n -.rt ACE was inherited. .RE .sp .ne 2 -.mk .na \fB\fB-\fR\fR .ad .RS 26n -.rt No permission granted. .RE @@ -498,45 +440,37 @@ An NFSv4 ACL is expressed using the following syntax: .sp .ne 2 -.mk .na \fBowner@\fR .ad .RS 10n -.rt File owner .RE .sp .ne 2 -.mk .na \fBgroup@\fR .ad .RS 10n -.rt Group owner .RE .sp .ne 2 -.mk .na \fBuser\fR .ad .RS 10n -.rt Permissions for a specific user .RE .sp .ne 2 -.mk .na \fBgroup\fR .ad .RS 10n -.rt Permissions for a specific group .RE @@ -549,7 +483,7 @@ ACL specification examples: .sp .in +2 .nf -user:fred:read_data/write_data/read_attributes:file_inherit:allow +user:fred:read_data/write_data/read_attributes:file_inherit:allow owner@:read_data:allow,group@:read_data:allow,user:tom:read_data:deny .fi .in -2 @@ -612,12 +546,10 @@ The Solaris command interface supports the manipulation of ACLs. The following Solaris utilities accommodate both ACL models: .sp .ne 2 -.mk .na \fB\fBchmod\fR\fR .ad .RS 12n -.rt The \fBchmod\fR utility has been enhanced to allow for the setting and deleting of ACLs. This is achieved by extending the symbolic-mode argument to support ACL manipulation. See \fBchmod\fR(1) for details. @@ -625,24 +557,20 @@ ACL manipulation. See \fBchmod\fR(1) for details. .sp .ne 2 -.mk .na \fB\fBcompress\fR\fR .ad .RS 12n -.rt When a file is compressed any ACL associated with the original file is preserved with the compressed file. .RE .sp .ne 2 -.mk .na \fB\fBcp\fR\fR .ad .RS 12n -.rt By default, \fBcp\fR ignores ACLs, unless the \fB-p\fR option is specified. When \fB-p\fR is specified the owner and group id, permission modes, modification and access times, ACLs, and extended attributes if applicable are @@ -651,46 +579,38 @@ preserved. .sp .ne 2 -.mk .na \fB\fBcpio\fR\fR .ad .RS 12n -.rt ACLs are preserved when the \fB-P\fR option is specified. .RE .sp .ne 2 -.mk .na \fB\fBfind\fR\fR .ad .RS 12n -.rt Find locates files with ACLs when the \fB-acl\fR flag is specified. .RE .sp .ne 2 -.mk .na \fB\fBls\fR\fR .ad .RS 12n -.rt By default \fBls\fR does not display ACL information. When the \fB-v\fR option is specified, a file's ACL is displayed. .RE .sp .ne 2 -.mk .na \fB\fBmv\fR\fR .ad .RS 12n -.rt When a file is moved, all attributes are carried along with the renamed file. When a file is moved across a file system boundary, the ACLs are replicated. If the ACL information cannot be replicated, the move fails and the source file is @@ -699,47 +619,39 @@ not removed. .sp .ne 2 -.mk .na \fB\fBpack\fR\fR .ad .RS 12n -.rt When a file is packed, any ACL associated with the original file is preserved with the packed file. .RE .sp .ne 2 -.mk .na \fB\fBrcp\fR\fR .ad .RS 12n -.rt \fBrcp\fR has been enhanced to support copying. A file's ACL is only preserved when the remote host supports ACLs. .RE .sp .ne 2 -.mk .na \fB\fBtar\fR\fR .ad .RS 12n -.rt ACLs are preserved when the \fB-p\fR option is specified. .RE .sp .ne 2 -.mk .na \fB\fBunpack\fR\fR .ad .RS 12n -.rt When a file with an ACL is unpacked, the unpacked file retains the ACL information. .RE |