System Administration Guide: Security Services

How to Delete ACL Entries From a File

  1. Delete ACL entries from a file by using the setfacl command.

    $ setfacl -d acl-entry-list filename ... 


    Deletes the specified ACL entries. 


    Specifies the list of ACL entries (without specifying the permissions) to delete from the file or directory. You can only delete ACL entries and default ACL entries for specific users and groups. Table 15–8 and Table 15–9 show the valid ACL entries.

    filename ...

    Specifies one or more files or directories, separated by a space. 

    Alternately, you can use setfacl -s to delete all the ACL entries on a file and replace them with the new ACL entries that are specified.

  2. To verify that the ACL entries were deleted from the file, by using the getfacl command.

    $ getfacl filename

Example—Deleting ACL Entries on a File

In the following example, the user george is deleted from the ch4.doc file.

$ setfacl -d user:george ch4.doc