HP-UX Reference (11i v3 07/02) - 5 Miscellaneous Topics (vol 9)

aclv(5) aclv(5)

The <sys/aclv.h> header also deﬁnes the set of valid values for the

a_type ﬁeld, as well as the valid

values for the cmd argument to the acl(2) system call.

Header <sys/getaccess.h>

The

header deﬁnes constants for use with getaccess(2).

Special parameter values for uid:

UID_EUID use effective user ID

UID_RUID use real user ID

UID_SUID use saved user ID

Special parameter values for ngroups:

NGROUPS_EGID process’s effective group ID

NGROUPS_RGID process’s real group ID

NGROUPS_SGID process’s saved group ID

NGROUPS_SUPP process’s supplementary groups only

NGROUPS_EGID_SUPP process’s effective group ID plus supplementary groups

NGROUPS_RGID_SUPP process’s real group ID plus supplementary groups

NGROUPS_SGID_SUPP process’s saved group ID plus supplementary groups

WARNINGS

ACLs cannot be used to restrict the superuser’s access.

Most, but not all, supported utilities are able to handle ACLs correctly. However, only the fbackup(1M) and

frecover(1M) ﬁle archive utilities handle access control lists properly. When using programs unable to han-

dle ACLs on ﬁles with optional ACL entries (such as archive programs ar(1), cpio(1), ftio(1), tar(1), and

dump(1M)), note the Access Control List information included on their respective reference pages to avoid

loss of data.

DEPENDENCIES

NFS

NFS does not support ACLs on remote ﬁles. Individual manual entries specify the behavior of various sys-

tem calls, library calls, and commands under these circumstances. Be careful when transferring a ﬁle with

optional entries over a network or when manipulating a remote ﬁle because optional entries may be silently

deleted.

AUTHOR

The access control list design described here was developed by AT&T.

FILES

<sys/aclv.h> Header ﬁle that supports acl(2).

/etc/passwd Deﬁnes user names and user and group ID values.

/etc/group Deﬁnes group names.