HP CIFS Server 2.2i Administrator's Guide version A.01.11.01

Managing HP-UX File Access Permissions from Windows NT/XP/2000
UNIX File Permissions and POSIX ACLs
Chapter 356
The VxFS POSIX ACL File Permissions
VxFS POSIX ACLs are a superset of UNIX file permissions. VxFS
POSIX ACLs extend the concept of UNIX file permissions in three ways.
• VxFS POSIX ACLs allow for more entries than the basic owner,
group and other UNIX file permissions.
• VxFS POSIX ACLs support default Access Control Entry (ACE) for
directory permissions. This means that any files created in that
directory will automatically inherit the default ACEs of the parent
directory. It adds an inheritance permission type to directory
permissions.
• A special ACE called the class ACE is used. The role of the class ACE
is to limit the other ACEs. The base UNIX permissions are not
affected.
For example, if the class ACE for a file is set to read (r--), then even
when ACEs grant some users and groups write and execute access,
write and execute access will not be given to them. The class ACE acts
as a mask that filters out the permissions of non-class ACEs. If the
class ACE was set to (---) or no access, other ACEs might exist, but
they would not change the effective permissions.
IMPORTANT VxFS is known as OnLineJFS.
VxFS POSIX ACL file permissions only work when JFS 3.3 disk layout
version4 is installed on the HP-UX 11.00 system. For HP-UX 11.11, JFS
3.3 and disk layout version4 is installed by default.
Learn how to install JFS 3.3 on HP-UX 11.0 in the HP JFS 3.3 and HP
OnLineJFS 3.3 Release Notes (MPN B3929-90007) located at
www.docs.hp.com.
Learn about installing and upgrading disk layout versions in the HP
JFS 3.3 and HPOnLineJFS 3.3 VERITAS File System 3.3 System
Administrator’s Guide (MPN B3929-90011) located at www.docs.hp.com.
VxFS POSIX ACLs translated to NT ACLs
The extra features of VxFS POSIX ACLs affect the translations to and
from NT ACLs in the following ways: