ACL权限(国外英语资料).docVIP

ACL权限(国外英语资料) Setfacl - sets file access control list commands Format 1: setfacl [-bkndrlb0-x} acl_spec] [{-m | - x} acl_file] Format 2: setfacl - restore = file describe Setfacl is used to set the acl in the command. Option -m and -x followed by the acl rule. Multiple acl rules are separated by a comma. The options -m and -x are used to read the acl rules from the file or standard input. Options - set and - set - file is used to set the acl rules for files or directories, and the previous Settings will be overwritten. Option -m (- the modify and -m (-modi-file) option modifies the acl rule for the file or directory. The options - x (- remove) and -c (-de--file) option delete the acl rule. When the -m, -x option reads the rules from the file, setfacl accepts the format that getfacl command outputs. When the setfacl command is used on a file system that does not support acls, setfacl modifies file permissions. If the acl rules do not exactly match the file permissions, setfacl will modify the file permissions make it as far as possible the reaction of the acl rules, and to the standard error to send error messages, return to greater than zero. permissions Root is the only user with CAP_FOWNERr capability. options - b - remove - all Remove all the extended acl rules, and the basic acl rule (owner, group, and others) will be preserved. - k - remove - default Delete the default acl rule. -n, - no - mask Do not recompute the valid permissions. Setfacl defaults to recalculating the acl mask unless the mask is explicitly made. - the mask Recompute the valid permissions even if the acl mask is specified explicitly. - d - the default Set the default acl rule. - restore = file The acl rules that are backed up from the file (these files can be generated by getfacl-r). This mechanism can restore the acl rule for the entire directory tree. This parameter cannot be executed with any parameter except for test. - the test The test mode will not change the acl rule of any file, and