HP-UX Reference (11i v2 04/09) - 2 System Calls (vol 5)

ManualsBrandsHP ManualsSoftwareHP-UX Reference Manuals

351

352

353

354

355

356

357

358

359

360

setacl(2) setacl(2)

Altering a base ACL entry’s modes with

setacl() changes the ﬁle’s corresponding permission bits. The

permission bits can be altered also by using

chmod() (see chmod(2)) and read using stat() (see

stat (2)).

The number of entries allowed per ﬁle (see

NACLENTRIES in <sys/acl.h>) is small for space and

performance reasons. User groups should be created as needed for access control purposes. Since ordi-

nary users cannot create groups, their ability to control ﬁle access with ACLs might be somewhat limited.

RETURN VALUE

Upon successful completion,

setacl() and fsetacl() return a value of zero. If an error occurs,

they return −1, the ﬁle’s ACL is not modiﬁed, and

errno is set to indicate the error.

ERRORS

setacl() fails if any of the following conditions are encountered:

[ENOTDIR] A component of the path preﬁx is not a directory.

[ENOENT] The named ﬁle does not exist (for example, path is null or a component of path

does not exist).

[EACCES] A component of the path preﬁx denies search permission.

[EPERM] The effective user ID does not match the owner of the ﬁle and the effective

user ID is not super-user.

[EROFS] The named ﬁle resides on a read-only ﬁle system.

[EFAULT] path or acl points outside the allocated address space of the process, or acl is

not as large as indicated by nentries .

[EINVAL] There is a redundant entry in the ACL, or acl contains an invalid uid , gid,or

mode value.

[E2BIG] An attempt was made to set an ACL with more than

NACLENTRIES entries.

[EOPNOTSUPP] The function is not supported on remote ﬁles by some networking services.

[ENOSYS] The function is not supported by this ﬁle system type.

[ENOSPC] Not enough space on the ﬁle system.

[ENFILE] System ﬁle table is full.

[ENAMETOOLONG]

The length of path exceeds

PATH_MAX bytes, or the length of a component of

path exceeds NAME_MAX bytes while _POSIX_NO_TRUNC

is in effect.

[ELOOP] Too many symbolic links were encountered in translating the path name.

[EDQUOT] User’s disk quota block or inode limit has been reached for this ﬁle system.

fsetacl() fails if any of the following conditions are encountered:

[EBADF] ﬁldes is not a valid ﬁle descriptor.