dxsetacl(8x) [osf1 man page]
dxsetacl(8X) dxsetacl(8X) NAME
dxsetacl - Graphical interface for setting the ACL on a file or directory SYNOPSIS
/usr/bin/X11/dxsetacl [arguments...] OPTIONS
The name of the file or directory to operate on. The regular X resources can be supplied to dxsetacl on the command line. DESCRIPTION
The dxsetacl command provides a graphical interface for examining and setting file access control lists (ACLs). If a path is specified on the command line, the file system object represented by path is used as the target of the command. In addition, there is a Find Object area on the main dialog box. A path may be typed in, or located by browsing the file system. A file reference may be dragged from a CDE application, such as the File Manager, and dropped on the Find Object area. Once an object is selected, its full path name, object type, owner, and group are displayed along with the ACL. The ACL is displayed, one entry per line, in a list widget. Clicking on an entry selects it. Double clicking on an entry or selecting the Change Entry button brings up a dialog that allows the fields of the entry to be modified. Clicking on the Delete Entry button removes the entry. The owning user, owning group, and other user entries may be modified but not deleted. (See acl(4) for more information.) The New Entry button may be used to create a new group or user entry. If the object is a regular file, device special file, or UNIX domain socket, it only has an access ACL. If the object is a directory, it has an access ACL, a default access ACL, and a default directory ACL. Which ACL of a directory is being edited may be selected with a radio button. Note The dxsetacl command will show and set ACLs on file system objects, regardless of whether ACLs are used by the system for access decisions. The sysman secconfig utility is used to enable ACL checking. SEE ALSO
Commands: X(1X), secconfig(8) Files: acl(4) dxsetacl(8X)
Check Out this Related Man Page
acl(2) System Calls Manual acl(2) NAME
acl() - set a file's Access Control List (ACL) information (JFS File Systems only) SYNOPSIS
DESCRIPTION
The system call is used to manipulate ACLs on JFS file system objects. pathp points to a path name naming a file. nentries specifies how many ACL entries are pointed to by aclbufp. aclbufp is a pointer to the first element of an array of This type is defined in as follows: The values for are: Permissions for the owner of the object. Permissions for additional users. Permissions for members of the owning group of the object. Permissions for members of additional groups. Maximum permissions granted to the file group class. Permissions for other users. Default permissions for the object owner. Default permissions for additional users. Default permissions for members of the owning group of the object. Default permissions for members of additional groups Default maximum permissions granted to the file group class. Default permissions for other users. cmd The following values for cmd are available: nentries ACL entries, specified in buffer aclbufp, are stored in the file's ACL. Any existing ACL on the file is replaced by the new ACL. All directories in the path name must be searchable. Buffer aclbufp is filled with the file's ACL entries. Discretionary read access to the file is not required, but all directo- ries in the path name must be searchable. The number of entries in the file's ACL is returned. Discretionary read access to the file is not required, but all directories in the path name must be searchable. For command the call will succeed if and only if all of the following are true: There is exactly one entry each of type and If pathp points to a directory, there is at most one entry each of type and Entries of type or do not contain duplicate entries. A duplicate entry is one of the same type containing the same numeric ID. If the ACL contains no entries of type and no entries of type then the entries of type and have the same permissions. If the ACL contains no entries of type and no entries of type and an entry of type is specified, then an entry of type is also spec- ified and the two entries have the same permissions. Security Restrictions The value for cmd can only be executed by a process that has an effective user ID equal to the owner of the file, or by the superuser, or by a user with the privilege. See privileges(5) for more information about privileged access on systems that support fine-grained privileges. RETURN VALUE
returns the following values: n Successful completion. Returns the number of ACL entries for cmd and Successful completion. Returns for cmd Failure. is set to indicate the error. ERRORS
If fails, the ACL is unchanged, and is set to one of the following values: The caller does not have access to a component of the path name. cmd is not or cmd is and nentries is less than the number of mandatory ACL entries(4). cmd is and the ACL specified in aclbufp is not valid [see above discussion, and aclsort(3C)]. A disk I/O error has occurred while storing or retrieving the ACL. cmd is and the effective user ID of the caller does not match the owner of the file, and the caller is not the superuser or a user with privilege. A component of the path does not exist. cmd is and nentries is less than the number of entries in the file's ACL. cmd is and there is insufficient space to store the ACL. cmd is and nentries is greater than which is defined in A component of the path specified by pathp is not a directory. cmd is and an attempt is made to set a default ACL on a file type other than a directory. cmd is the file specified by pathp resides on a local non-JFS file system, and additional entries were specified in the ACL. cmd is the file specified by pathp resides on a non-local file system, and additional entries were specified in the ACL. cmd is and the file specified by pathp resides on a file system that is mounted read-only. aclbufp points to an illegal address. SEE ALSO
aclsort(3), getacl(1), setacl(1), privileges(5). acl(2)