aclv.5 (2010 09)

aclv(5) aclv(5)

Header <sys/getaccess.h>

The <sys/getaccess.h>

header deﬁnes constants for use with getaccess (2).

Special parameter values for uid:

UID_EUID use effective user ID

UID_RUID use real user ID

UID_SUID use saved user ID

Special parameter values for ngroups:

NGROUPS_EGID process’s effective gid

NGROUPS_RGID process’s real gid

NGROUPS_SGID process’s saved gid

NGROUPS_SUPP process’s supplementary groups only

NGROUPS_EGID_SUPP process’s effective gid plus supplementary groups

NGROUPS_RGID_SUPP process’s real gid plus supplementary groups

NGROUPS_SGID_SUPP process’s saved gid plus supplementary groups

WARNINGS

ACLs cannot be used to restrict the superuser’s access.

Most, but not all, supported utilities are able to handle ACLs correctly. However, only the fbackup (1M)

and frecover (1M) ﬁle archive utilities handle access control lists properly. When using programs unable

to handle ACLs on ﬁles with optional ACL entries (such as archive programs ar(1), cpio (1), ftio (1), tar (1),

and dump(1M)), note the Access Control List information included on their respective reference pages to

avoid loss of data.

DEPENDENCIES

NFS NFS does not support ACLs on remote ﬁles. Individual manual entries specify the behavior of vari-

ous system calls, library calls, and commands under these circumstances. Be careful when transfer-

ring a ﬁle with optional entries over a network or when manipulating a remote ﬁle because optional

entries may be silently deleted.

AUTHOR

The access control list design described here was developed by AT&T.

FILES

<sys/aclv.h> Header ﬁle that supports acl (2).

/etc/passwd Deﬁnes user names and user and group ID values.

/etc/group Deﬁnes group names.