Difference between revisions of "ACLs: Access Control Lists"

Revision as of 21:42, 30 November 2018

Flag	Name	Description
r	read_data	Read access on a file
w	write_data	Write access on a file
x	execute	Execute access on a file. Search access on a directory.
p	append_data	Append access on a file
D	delete_child	Permission to delete a file or directory within a directory
d	delete	Permission to delete a file
a	read_attributes	Read attribute (stat) access on a file or directory
A	write_attributes	Write attribute (stat) access on a file or directory
R	read_xattr	Read extended attributes on a file or directory (Not implemented)
W	write_xattr	Write extended attributes on a file or directory (Not implemented)
c	read_acl	Read ACL access on a file or directory
C	write_acl	Write ACL access on a file or directory
o	write_owner	Permission to change file or directory owner or group
s	synchronize	Not implemented
:
f	file_inherit	Only inherit the ACL from the parent directory to the directory's files
d	dir_inherit	Only inherit the ACL from the parent directory to the directory's subdirectories
i	inherit_only	Inherit the ACL from the parent directory but only applies to newly created files and/or subdirectories and not the directory itself. file_inherit and/or dir_inherit need to be set.
n	no_propogate	Only inherit the ACL to the first level file or subdirectories. file_inherit and/or dir_inherit need to be set.
I	inherited	Indicates an inherited ACE
:
allow/deny		Allow/deny the ACE

@@ Line 48: / Line 48: @@
 |-
 |allow/deny||||Allow/deny the ACE
+|}
 *from https://www.bsdcan.org/2017/schedule/attachments/398_Understanding%20NFSv4%20ACL%27s