xenial (1) lfc-getacl.1.gz

NAME

       lfc-getacl - get LFC directory/file access control lists

SYNOPSIS

       lfc-getacl [-a] [-d] path...

DESCRIPTION

       lfc-getacl  gets  the  Access  Control  List  associated  with  a  LFC directory/file.  For each path, it
       displays the file name, owner, the group, and the Access Control List (ACL) if present.  If  a  directory
       has a default ACL, lfc-getacl also displays the default ACL. Regular files cannot have default ACLs.

       The output looks like:

            # file: filename
            # owner: username
            # group: groupname
            user::perm
            user:uid:perm
            group::perm
            group:gid:perm
            mask:perm
            other:perm
            default:user::perm
            default:user:uid:perm
            default:group::perm
            default:group:gid:perm
            default:mask:perm
            default:other:perm

       The  first  "user"  entry  gives  the permissions granted to the owner of the file.  The following "user"
       entries show the permissions granted to specific users, they are sorted in ascending order of  uid.   The
       first  "group" entry gives the permissions granted to the group owner of the file.  The following "group"
       entries show the permissions granted to specific groups, they are sorted in ascending order of gid.   The
       "mask"  entry  is  the  maximum  permission  granted to specific users or groups.  It does not affect the
       "owner" and "other" permissions.  The "mask" entry must be  present  if  there  are  specific  "user"  or
       "group"  entries.  "default" entries associated with a directory are inherited as access ACL by the files
       or sub-directories created in that directory. The umask is not used.  Sub-directories  also  inherit  the
       default  ACL  as  default ACL.  As soon as there is one default ACL entry, the 3 default ACL base entries
       (default user, default group, default other) must be present.

       The entry processing conforms to the Posix 1003.1e draft standard 17.

       path   specifies the LFC pathname.  If path does not start with /, it is prefixed by the content  of  the
              LFC_HOME environment variable.

       uid    is displayed as the username if known else as the numeric id.

       gid    is displayed as the groupname if known else as the numeric id.


       perm   is expressed as a combination of characters rwx-

OPTIONS

       -a     only display the access ACL.

       -d     only display the default ACL.

EXAMPLES

       lfc-getacl /grid/atlas/test/file.log/d2

       # file: /grid/atlas/test/file.log/d2
       # owner: baud
       # group: c3
       user::rwx
       group::r-x              #effective:r-x
       other::r-x
       default:user::rwx
       default:group::r-x
       default:other::r-x

EXIT STATUS

       This program returns 0 if the operation was successful or >0 if the operation failed.

SEE ALSO

       Castor_limits(4), lfc_chmod(3), lfc_chown(3)

AUTHOR

       LCG Grid Deployment Team