Managing Systems and Workgroups: A Guide for HP-UX System Administrators

Administering a System: Managing System Security
Managing Access to Files and Directories
Chapter 8770
• A JFS directory’s ACL can have default entries, which are applied to
files subsequently created in that directory. HFS ACLs do not have
this capability.
• An HFS ACL has an owner that can be different from the owner of
the file the ACL controls. JFS ACLs are owned by the owner of the
corresponding file.
• An HFS ACL can have different entries for a particular user in
specific groups. For example, userx may have read and write access
while a member of group users, but have only read access while a
member of group other.
JFS and HFS Command and Function Mapping
The following table lists equivalent commands and functions for JFS
ACLs and HFS ACLs.
Table 8-1 HFS and JFS ACL Equivalents
HFS Name JFS Equivalent
chacl (1) setacl (1)
lsacl (1) getacl (1)
getacl (2) acl (2)
fgetacl (2) —none—
setacl (2) acl (2)
fsetacl (2) —none—
acltostr (3C) —none—
chownacl (3C) —none—
cpacl (3C) —none—
setaclentry (3C) —none—
strtoacl (3C) —none—
—none— aclsort (3C)
acl (5) aclv (5)