HP-UX Reference (11i v2 07/12) - 1M System Administration Commands N-Z (vol 4)

s
swacl(1M) swacl(1M)
user:ramon:-r--t
group:swadm:crwit
other:-r--t
host:lehi.fc.hp.com:-r--t
To list the product template ACL on host
newdist:
swacl -l global_product_template @ newdist
To list the host ACL on the local system:
swacl -l host
To read, edit, then replace the ACL protecting the default depot
/var/spool/sw
:
swacl -l depot > new_acl_file
vi new_acl_file
swacl -l depot -F new_acl_file
To allow user allen to create, register, and manage all new depots and roots on the local system:
swacl -l host -M user:allen:a
swacl -l global_soc_template -M user:allen:a
swacl -l global_product_template -M user:allen:a
To allow user allen to fully manage my_depot, which already exists:
swacl -l depot -M user:allen:a @ /my_depot
swacl -l product_template -M user:allen:a @ /my_depot
swacl -l product -M user:allen:a \* @ /my_depot
To deny general access to a depot:
swacl -l depot -M any_other:- @ /restricted_depot
swacl -l product -M any_other:- \* @ /restricted_depot
swacl -l product_template -M any_other:- @ /restricted_depot
To allow user allen on host gemini access to restricted_depot
and all products it currently
contains:
swacl -l depot -M host:*:rt @ /restricted_depot
swacl -l depot -M user:allen@gemini:rt @ /restricted_depot
swacl -l product -M user:allen@gemini:rt \* @ /restricted_depot
To revoke previously granted ACL permission for user allen on host gemini to access the
WDB pro-
duct in the default depot on
lehi:
swacl -l product -D user:allen@gemini WDB @ lehi
To deny access to the default depot on the local system from host numenal:
swacl -l depot -M host:numenal:-
To deny access to the OPENVIEW product in the default depot on host lehi to all users who do not have
an explicit ACL entry:
swacl -l product -M any_other:t OPENVIEW @ lehi
To allow user george on host newdist access to the OPENVIEW product in the default depot on host
lehi, you must specify both a user ACL for george and a host ACL for newdist:
swacl -l product -M user:george@newdist:rt OPENVIEW @ lehi
swacl -l product -M host:newdist:rt OPENVIEW @ lehi
To revoke a user ACL for user allen on host gemini that allowed access to the OPENVIEW product in
the default depot on host lehi:
swacl -l product -D user:allen@gemini OPENVIEW @ lehi
To revoke any previously issued access to the OPENVIEW product in the default depot on host lehi by
users on host numenal:
swacl -l product -D host:numenal OPENVIEW @ lehi
To deny all access to the users steve and george for the depot /var/spool/sw at host newdist:
HP-UX 11i Version 2: December 2007 Update − 9 − Hewlett-Packard Company 417