acl_get_fd(3) Library Functions Manual acl_get_fd(3)NAME
acl_get_fd - Retrieves the specified ACL associated with the specified file or directory
LIBRARY
Security Library (libpacl.a)
SYNOPSIS
#include <sys/acl.h>
acl_t acl_get_fd( int fd); acl_type_t type_d);
PARAMETERS
Designates the file descriptor of the file or directory to retrieve the ACL from. Designates the type of ACL to retrieve: ACL_TYPE_ACCESS,
ACL_TYPE_DEFAULT, or ACL_TYPE_DEFAULT_DIR.
DESCRIPTION
NOTE: This function is based on Draft 13 of the POSIX P1003.6 standard.
The acl_get_fd() function retrieves the specified ACL for the given file descriptor. The acl_tag_t field designates if the ACL being
retrieved is an access or default ACL. Working storage is allocated as needed.
RETURN VALUES
Upon successful completion, the acl_get_fd() function returns a pointer to the working storage internal representation copy of the ACL. If
the specified ACL type is ACL_TYPE_DEFAULT or ACL_TYPE_DEFAULT_DIR and the specified ACL doesn't exist for the given file descriptor a
value of NULL is returned. If the specified ACL type is ACL_TYPE_ACCESS and the given file descriptor doesn't have an access ACL a pointer
to the working storage internal representation copy of the permission bits in ACL format is returned. Otherwise, a value of NULL is
returned and errno is set to indicate the error.
ERRORS
If any of the following conditions occur, the acl_get_fd() function sets errno to the corresponding value:
The required access to the file or directory was denied. The fd argument is not a valid file descriptor. The argument type_d is not a
recognized ACL type. There is not enough memory available to the process to allocate the working storage. The type_d argument indicates a
default ACL, and fd does not point to a directory.
RELATED INFORMATION acl_get_file(3), acl_set_file(3), acl_set_fd(3),
Security delim off
acl_get_fd(3)
Check Out this Related Man Page
ACL_GET(3) BSD Library Functions Manual ACL_GET(3)NAME
acl_get_fd, acl_get_fd_np, acl_get_file, acl_get_link_np -- get an ACL for a file
LIBRARY
Standard C Library (libc, -lc)
SYNOPSIS
#include <sys/types.h>
#include <sys/acl.h>
acl_t
acl_get_fd(int fd);
acl_t
acl_get_fd_np(int fd, acl_type_t type);
acl_t
acl_get_file(const char *path_p, acl_type_t type);
acl_t
acl_get_link_np(const char *path_p, acl_type_t type);
DESCRIPTION
The acl_get_fd(), acl_get_file(), acl_get_link_np(), and acl_get_fd_np() each allow the retrieval of an ACL from a file. The acl_get_fd() is
a POSIX.1e call that allows the retrieval of an ACL of type ACL_TYPE_ACCESS from a file descriptor. The acl_get_fd_np() function is a non-
portable form of acl_get_fd() that allows the retrieval of any type of ACL from a file descriptor. The acl_get_file() function is a POSIX.1e
call that allows the retrieval of a specified type of ACL from a file by name; acl_get_link_np() is a non-portable variation on
acl_get_file() which does not follow a symlink if the target of the call is a symlink.
These functions may cause memory to be allocated. The caller should free any releasable memory, when the new ACL is no longer required, by
calling acl_free(3) with the (void *)acl_t as an argument.
The ACL in the working storage is an independent copy of the ACL associated with the object referred to by fd. The ACL in the working stor-
age shall not participate in any access control decisions.
RETURN VALUES
Upon successful completion, the function shall return a pointer to the ACL that was retrieved. Otherwise, a value of (acl_t)NULL shall be
returned, and errno shall be set to indicate the error.
ERRORS
If any of the following conditions occur, the acl_get_fd() function shall return a value of (acl_t)NULL and set errno to the corresponding
value:
[EACCES] Search permission is denied for a component of the path prefix, or the object exists and the process does not have appro-
priate access rights.
[EBADF] The fd argument is not a valid file descriptor.
[EINVAL] The ACL type passed is invalid for this file object.
[ENAMETOOLONG] A component of a pathname exceeded 255 characters, or an entire path name exceeded 1023 characters.
[ENOENT] The named object does not exist, or the path_p argument points to an empty string.
[ENOMEM] Insufficient memory available to fulfill request.
[EOPNOTSUPP] The file system does not support ACL retrieval.
SEE ALSO acl(3), acl_free(3), acl_get(3), acl_set(3), posix1e(3)STANDARDS
POSIX.1e is described in IEEE POSIX.1e draft 17.
AUTHORS
Michael Smith
Robert N M Watson
BSD December 29, 2002 BSD