System Administration Guide, Volume 2

Access Control Lists (ACLs)

ACLs (ACLs, pronounced "ackkls") can provide greater control over file permissions when the traditional UNIX file protection in the SunOS operating system is not enough. The traditional UNIX file protection provides read, write, and execute permissions for the three user classes: owner, group, and other. An ACL provides better file security by enabling you to define file permissions for the owner, owner's group, others, specific users and groups, and default permissions for each of those categories. See "Using Access Control Lists (ACLs)" for step-by-step instructions on using ACLs.

The table below lists the commands for administering ACLs on files or directories.

Table 16-2 ACL Commands

Command 

Description 

setfacl(1)

Sets, adds, modifies, and deletes ACL entries 

getfacl(1)

Displays ACL entries