1LFC-GETACL(1)                  LFC User Commands                 LFC-GETACL(1)
2
3
4

NAME

6       lfc-getacl - get LFC directory/file access control lists
7

SYNOPSIS

9       lfc-getacl [-a] [-d] path...
10

DESCRIPTION

12       lfc-getacl  gets  the  Access Control List associated with a LFC direc‐
13       tory/file.  For each path, it   displays  the  file  name,  owner,  the
14       group, and the Access Control List (ACL) if present. If a directory has
15       a default ACL, lfc-getacl also displays the default ACL. Regular  files
16       cannot have default ACLs.
17
18       The output looks like:
19
20            # file: filename
21            # owner: username
22            # group: groupname
23            user::perm
24            user:uid:perm
25            group::perm
26            group:gid:perm
27            mask:perm
28            other:perm
29            default:user::perm
30            default:user:uid:perm
31            default:group::perm
32            default:group:gid:perm
33            default:mask:perm
34            default:other:perm
35
36       The  first  "user"  entry gives the permissions granted to the owner of
37       the file.  The following "user" entries show the permissions granted to
38       specific  users,  they are sorted in ascending order of uid.  The first
39       "group" entry gives the permissions granted to the group owner  of  the
40       file.   The  following  "group" entries show the permissions granted to
41       specific groups, they are sorted in ascending order of gid.  The "mask"
42       entry  is  the  maximum permission granted to specific users or groups.
43       It does not affect the "owner" and  "other"  permissions.   The  "mask"
44       entry  must be present if there are specific "user" or "group" entries.
45       "default" entries associated with a directory are inherited  as  access
46       ACL  by  the  files  or  sub-directories created in that directory. The
47       umask is not used.  Sub-directories also inherit  the  default  ACL  as
48       default  ACL.  As soon as there is one default ACL entry, the 3 default
49       ACL base entries (default user, default group, default other)  must  be
50       present.
51
52       The entry processing conforms to the Posix 1003.1e draft standard 17.
53
54       path   specifies  the  LFC pathname.  If path does not start with /, it
55              is prefixed by the content of the LFC_HOME environment variable.
56
57       uid    is displayed as the username if known else as the numeric id.
58
59       gid    is displayed as the groupname if known else as the numeric id.
60
61       perm   is expressed as a combination of characters rwx-
62

OPTIONS

64       -a     only display the access ACL.
65
66       -d     only display the default ACL.
67

EXAMPLES

69       lfc-getacl /grid/atlas/test/file.log/d2
70
71       # file: /grid/atlas/test/file.log/d2
72       # owner: baud
73       # group: c3
74       user::rwx
75       group::r-x              #effective:r-x
76       other::r-x
77       default:user::rwx
78       default:group::r-x
79       default:other::r-x
80

EXIT STATUS

82       This program returns 0 if the operation was successful  or  >0  if  the
83       operation failed.
84

SEE ALSO

86       Castor_limits(4), lfc_chmod(3), lfc_chown(3)
87

AUTHOR

89       LCG Grid Deployment Team
90
91
92
93LFC                      $Date: 2005/03/02 08:32:12 $            LFC-GETACL(1)
Impressum