diff --git a/docs.it4i/storage/standard-file-acl.md b/docs.it4i/storage/standard-file-acl.md index 1ac39e3ea386a9f681435786942f21db4db1a357..901dcf9850ec25ab872c57c34b1f0d75b2a05d43 100644 --- a/docs.it4i/storage/standard-file-acl.md +++ b/docs.it4i/storage/standard-file-acl.md @@ -1,16 +1,12 @@ # Standard File ACL -https://wiki.archlinux.org/title/Access_Control_Lists +Access control list (ACL) provides an additional, more flexible permission mechanism for file systems. It is designed to assist with UNIX file permissions. ACL allows you to give permissions for any user or group to any disk resource. For more information, see the [wikipedia][1] page. -Standart ACL -============ +## Show ACL -Access control list (ACL) provides an additional, more flexible permission mechanism for file systems. It is designed to assist with UNIX file permissions. ACL allows you to give permissions for any user or group to any disk resource. - -Show ACL -======== To show permissions, use: +```code # getfacl <file/dir> Examples Set all permissions for user johnny to file named abc: @@ -68,16 +64,16 @@ user:solstice:rw- group::rw- mask::rw- other::--- - - - +``` +## Modify ACL The ACL can be modified using the setfacl command. -=================================================== + You can list file/directory permission changes without modifying the permissions (i.e. dry-run) by appending the --test flag. To apply operations to all files and directories recursively, append the -R/--recursive argument. To set permissions for a user (user is either the user name or ID): +```code # setfacl -m "u:user:permissions" <file/dir> To set permissions for a group (group is either the group name or ID): @@ -97,5 +93,6 @@ To remove the default entries: To remove all entries (entries of the owner, group and others are retained): # setfacl -b <file/dir> +``` - +[1]: https://wiki.archlinux.org/title/Access_Control_Lists