1GETRICHACL(7) Rich Access Control Lists GETRICHACL(7)
2
3
4
6 getrichacl - Get Rich Access Control Lists
7
9 getrichacl [option]... [file]...
10
12 For each file, getrichacl displays the file name and the file's Rich
13 Access Control List (RichACL).
14
15 The output format of getrichacl is as follows:
16
17 1: file:
18 2: flags:a
19 3: owner:rwp-------------::mask
20 4: group:r-p-------------::mask
21 5: other:r---------------::mask
22 6: owner@:rwp-------------::allow
23 7: user:foo:r-p-------------::allow
24 8: group@:r-p-------------::allow
25 9: group:bar:r-p-------------::allow
26 10: everyone@:r---------------::allow
27 11:
28
29 Line 1 contains the file name, followed by a colon.
30
31 Line 2 contains the ACL flags. This line is omitted if no flags are
32 set.
33
34 Lines 3--5 indicate the owner, group, and other file masks, which are
35 only shown if the --raw option is specified.
36
37 Lines 6--10 indicate different ACL entries for the file owner (owner@),
38 user foo, the owning group (group@), group bar, and for everyone
39 (everyone@).
40
41 A blank line follows at the end.
42
43 The default output format uses the single-letter forms of flags and
44 permissions, identifiers of ACL entries are right justified, permis‐
45 sions are vertically aligned, and permissions which are always granted
46 (read_attributes, read_acl, synchronize) are omitted. See the
47 richacl(7) manual page for the defined flags and permissions.
48
49 By default, getrichacl displays the effective permissions remaining
50 after applying the file masks to the ACL. The file masks and underly‐
51 ing NFSv4 ACL can be displayed with the --raw option.
52
53 When getrichacl is used on a file that does not have a RichACL or on a
54 filesystem that does not support RichACLs, it displays the access per‐
55 missions defined by the traditional file permission bits as a RichACL.
56 When getrichacl is used on a file that has a POSIX ACL (see acl(5)), it
57 prints an error message.
58
60 --long, -l
61 Display access masks and flags in their long form.
62
63 --full Also show permissions which are always implicitly allowed.
64
65 --raw Show ACLs as stored on the file system, including the file
66 masks. Implies --full.
67
68 --unaligned
69 Do not align ACL entries or pad missing permissions with “-”.
70
71 --numeric-ids
72 Display numeric user and group IDs instead of names.
73
74 --access [=user[:group:...]}, -a[user[:group:...]}
75 Instead of showing the ACL, show which permissions the user run‐
76 ning the command has for the specified file(s). When user is
77 specified, show which permissions the specified user has
78 instead. If user is followed by a colon and a (possibly empty)
79 list of groups, assume that user is a member in the specified
80 groups; otherwise, getgrouplist(3) is used to determine the
81 groups user is a member of.
82
83 --version, -v
84 Display the version of getrichacl and exit.
85
86 --help, -h
87 Display command-line usage help text.
88
90 Written by Andreas Grünbacher <agruenba@redhat.com>.
91
92 Please send your bug reports, suggested features and comments to the
93 above address.
94
96 Rich Access Control Lists are Linux-specific.
97
99 setrichacl(1), richacl(7), richaclex(7)
100
101
102
103Linux 2016-02-23 GETRICHACL(7)