System Administration Guide: Security Services

Examples—Modifying ACL Entries on a File

In the following example, the permissions for the user george are modified to read and write.


$ setfacl -m user:george:6 ch3.doc
$ getfacl ch3.doc
# file: ch3.doc
# owner: nathan
# group: staff
user::rw-				
user::george:rw-				#effective:r--
group::r-	              #effective:r--
mask:r--
other:r-

In the following example, the default permissions for the group staff are modified to read and the default ACL mask permissions are modified to read and write on the book directory.


$ setfacl -m default:group:staff:4,default:mask:6 book