Access Control List (ACL)

• The mask is a quick way to change permissions on all the users and groups.

• u[ser]:uid:perms Permissions for a specific user.

• g[roup]:gid:perms Permissions for a specific group.

• Example: The following example adds one ACL entry to file abc, which gives user vahid read permission only.

  • setfacl -m user:vahid:r-- abc

• Example: The following example replaces the entire ACL for the file myfile, which gives vahid read access, the file owner all access, the file group owner read access only, the ACL mask read/write access, and others no access.

  • setfacl -s user:vahid:rwx,user::rwx,group::rw-,mask:r--,other:--- myfile
  • getfacl myfile to see the ACL entries on the file.