Manualshelf

getacl.1 (2010 09)

ManualsBrandsHP ManualsSoftwareHP-UX Manpages
1234
g
getacl(1) getacl(1)
NAME
getacl - list access control lists (ACLs) for files (JFS File Systems only)
SYNOPSIS
/usr/bin/getacl
[-ad] file...
DESCRIPTION
For each argument that is a regular file, special file, or named pipe,
getacl displays the owner, group,
and the Access Control List (ACL). For each directory argument,
getacl displays the owner, group, and
the ACL and/or the default ACL. Only directories contain default ACLs.
With the
-a option specified, the filename, owner, group, and the ACL of the file will be displayed. With
the -d option specified, the filename, owner, group, and the default ACL of the file, if it exists, will be
displayed. With options not specified, the filename, owner, group, and both the ACL, and the default
ACL, if it exists, will be displayed.
This command may be executed on a file system that does not support ACLs. It will report the ACL con-
sisting of only the owning user, owning group, class and other entries, based on the permission bits.
When multiple files are specified on the command line, a blank line will separate the ACL for each file.
Options
The
getacl command recognizes the following options:
-a Displays the filename, owner, group, and the ACL of the specified file.
-d Displays the the filename, owner, group, and the default ACL of the file, if it exists.
Operands
The
getacl command recognizes the following operand:
file The file or directory from which
getacl retrieves the access control information.
ACL Format
The format of an ACL is:
# file: filename
# owner: uid
# group: gid
user::perm
user:uid:perm
group::perm
group:gid:perm
class:perm
other:perm
default:user::perm
default:user:uid:perm
default:group::perm
default:group:gid:perm
default:class:perm
default:other:perm
The first three lines show the filename, the file owner, and the file owning group. Note that when only
the
-d option is specified, and the file has no default ACL, only these three lines will be displayed.
The
user entry without a user ID indicates the permissions that will be granted to the owner of the file.
One or more additional user entries indicate the permissions that will be granted to the specified users.
The group entry without a group identifier indicates the permissions that will be granted to the owning
group of the file. One or more additional group entries indicate the permissions that will be granted to
the specified groups. The other entry indicates the permissions that will be granted to others.
The
default entries (default:user, default:group, and default:other) may only exist for
directories, and indicate the default user, group, and other entries that will be added to a file created
within the directory.
The uid is a login name, or a user ID if there is no entry for the uid in the system’s password file; gid is a
group name, or a group ID if there is no entry for the gid in the system’s group file; and perm is a three
character string composed of the letters representing the separate discretionary access rights:
r (read), w
HP-UX 11i Version 3: September 2010 − 1 − Hewlett-Packard Company 1

Summary of content (4 pages)