Login or Register to Ask a Question and Join Our Community

Linux and UNIX Man Pages

Linux & Unix Commands - Search Man Pages

facl_set(3sec) [opensolaris man page]

acl_get(3SEC)					       File Access Control Library Functions					     acl_get(3SEC)

NAME

       acl_get, facl_get, acl_set, facl_set - get or set a file's Access Control List (ACL)

SYNOPSIS

       cc [ flag... ] file... -lsec [ library... ]
       #include <sys/acl.h>

       int *acl_get(const char *path, int flag, acl_t **aclp);

       int *facl_get(int fd, int flag, acl_t **aclp);

       int acl_set(const char *path, acl_t *aclp);

       int facl_set(int fd, acl_t *aclp);

DESCRIPTION

       The  acl_get()  and  facl_get()	functions retrieve an Access Control List (ACL) of a file whose name is given by path or referenced by the
       open file descriptor fd. The flag argument specifies whether a trivial ACL should be retrieved. When the flag argument  is  ACL_NO_TRIVIAL,
       only ACLs that are not trivial will be retrieved. The ACL is returned in the aclp argument.

       The  acl_set()  and  facl_set()	functions are used for setting an ACL of a file whose name is given by path or referenced by the open file
       descriptor fd. The aclp argument specifies the ACL to set.

       The acl_get() and acl_set() functions support multiple types of ACLs.  When possible, the acl_set() function translates an ACL to the  tar-
       get  file's style of ACL. Currently this is only possible when translating from a POSIX-draft ACL such as on UFS to a file system that sup-
       ports NFSv4 ACL semantics such as ZFS or NFSv4.

RETURN VALUES

       Upon successful completion, acl_get() and facl_get() return 0 and aclp is non-NULL. The aclp argument can be NULL after successful  comple-
       tion  if  the  file  had a trivial ACL and the flag argument was ACL_NO_TRIVIAL. Otherwise, -1 is returned and errno is set to indicate the
       error.

       Upon successful completion, acl_set() and facl_set() return 0. Otherwise, -1 is returned and errno is set to indicate the error.

ERRORS

       These functions will fail if:

       EACCES	  The caller does not have access to a component of path.

       EIO	  A disk I/O error has occured while retrieving the ACL.

       ENOENT	  A component of the path does not exist.

       ENOSYS	  The file system does not support ACLs.

       ENOTSUP	  The ACL supplied could not be translated to an NFSv4 ACL.

ATTRIBUTES

       See attributes(5) for descriptions of the following attributes:

       +-----------------------------+-----------------------------+
       |      ATTRIBUTE TYPE	     |	    ATTRIBUTE VALUE	   |
       +-----------------------------+-----------------------------+
       |Interface Stability	     |Evolving			   |
       +-----------------------------+-----------------------------+
       |MT-Level		     |MT-Safe			   |
       +-----------------------------+-----------------------------+

SEE ALSO

       chmod(1), acl(2), acl(5), attributes(5)

SunOS 5.11							    6 Oct 2005							     acl_get(3SEC)

Check Out this Related Man Page

acl_check(3SEC) 				       File Access Control Library Functions					   acl_check(3SEC)

NAME

       acl_check - check the validity of an ACL

SYNOPSIS

       cc [ flag... ] file... -lsec [ library... ]
       #include <sys/acl.h>

       int acl_check(acl_t *aclp, int isdir);

DESCRIPTION

       The  acl_check()  function  checks the validity of an ACL pointed to by aclp. The isdir argument checks the validity of an ACL that will be
       applied to a directory. The ACL can be either a POSIX draft ACL as supported by UFS or NFSv4 ACL as supported by ZFS or NFSV4.

       When the function verifies a POSIX draft ACL, the rules followed are described in aclcheck(3SEC).  For  NFSv4  ACL,  the  ACL  is  verified
       against the following rules:

	   o	  The inheritance flags are valid.

	   o	  The ACL must have at least one ACL entry and no more than {MAX_ACL_ENTRIES}.

	   o	  The permission field contains only supported permissions.

	   o	  The entry type is valid.

	   o	  The flag fields contain only valid flags as supported by NFSv4/ZFS.

       If any of the above rules are violated, the function fails with errno set to EINVAL.

RETURN VALUES

       If the ACL is valid, acl_check() returns 0. Otherwise errno is set to EINVAL and the return value is set to one of the following:

       EACL_INHERIT_ERROR     There are invalid inheritance flags specified.

       EACL_FLAGS_ERROR       There are invalid flags specified on the ACL that don't map to supported flags in NFSV4/ZFS ACL model.

       EACL_ENTRY_ERROR       The ACL contains an unknown value in the type field.

       EACL_MEM_ERROR	      The system cannot allocate any memory.

       EACL_INHERIT_NOTDIR    Inheritance flags are only allowed for ACLs on directories.

ATTRIBUTES

       See attributes(5) for descriptions of the following attributes:

       +-----------------------------+-----------------------------+
       |      ATTRIBUTE TYPE	     |	    ATTRIBUTE VALUE	   |
       +-----------------------------+-----------------------------+
       |Interface Stability	     |Committed 		   |
       +-----------------------------+-----------------------------+
       |MT-Level		     |MT-Safe			   |
       +-----------------------------+-----------------------------+

SEE ALSO

       acl(2), aclcheck(3SEC), aclsort(3SEC), acl(5), attributes(5)

SunOS 5.11							    22 Apr 2008 						   acl_check(3SEC)
Man Page