Administrator's Guide

Table 5-2 HFS ACL Commands
DescriptionCommands
Changes HFS ACLs of files.chacl
Lists user's access rights to files.getaccess
Lists HFS ACLs of files.lsacl
Table 5-3 HFS ACL System Calls
DescriptionSystem Call
Gets a user's effective access rights to a file.getaccess
Gets HFS ACL information.getacl, fgetacl
Sets HFS ACL information.setacl, fsetacl
Converts HFS ACL structure to string form.acltostr
Changes the owner or group represented in an HFS
file's ACL.
chownacl
Copies HFS ACL and mode bits from one file to
another.
cpacl, fcpacl
Adds, modifies, or deletes an HFS file's ACL entry.setaclentry, fsetaclentry
Parses and converts HFS ACL structure to string form.strtoacl
Parses and converts HFS ACL pattern strings to
arrays.
strtoaclpatt
The following commands, system calls, and subroutine libraries affect ACL entries,
sometimes in unexpected ways.
Table 5-4 Commands and Calls Affecting ACL Entries
DescriptionCommand or Call
Deletes HFS ACLs by default. Use the -A option to
retain HFS ACLs.
chmod
Deletes HFS ACL entries. Use getacl and setacl
to save and restore the HFS ACL entries.
chmod
Does not set a file's optional ACL entries.cpset
Identifies files whose ACL entries match or include
specific ACL patterns on HFS or JFS file systems.
find
The long form indicates the existence of ACLs by
displaying a plus sign (+) after the file's permission
bits.
ls -l
94 File System Security