Software Distributor Administration Guide for HP-UX 11i

SD-UX Security
ACL Entries
Chapter 9 273
ACL Entries
An ACL consists of a set of entries attached to an object when it is
created. These entries define which users, groups, and/or hosts have
permission to access the objects. ACL entries include the concept of a
principal, which is the user, group or host system (for agents making
RPCs) that originates a call to another system.
An ACL entry consists of three fields:
entry_type [: key ]: permissions
For example, an ACL entry for an SD-UX object might be:
user:fred:r-ctw
This means that a user named fred can control (c), read (r), write
(w), and test (t) the object, but the dash signifies that he cannot i
(insert/create) new objects.
NOTE You can specify crwit permissions in any order.
The ACL entry_type must be one of these values:
Table 9-3 SD-UX ACL Entry Types
Type Permissions Apply To
user User principal, whose name is to
be specified in the key field
group Group principal, whose name is
to be specified in the key field
host Host systems (target agents
acting on behalf of users for
install or copy)
other Principals with no matching user
and group entries