Movatterモバイル変換

Document Information

Preface

Introduction

System Calls

access(2)

acct(2)

acl(2)

adjtime(2)

alarm(2)

brk(2)

chdir(2)

chmod(2)

chown(2)

chroot(2)

close(2)

creat(2)

dup(2)

exec(2)

execl(2)

execle(2)

execlp(2)

execv(2)

execve(2)

execvex(2)

execvp(2)

_Exit(2)

_exit(2)

exit(2)

faccessat(2)

fchdir(2)

fchmod(2)

fchmodat(2)

fchown(2)

fchownat(2)

fchroot(2)

fcntl(2)

fexecve(2)

fgetlabel(2)

fork1(2)

fork(2)

forkall(2)

forkallx(2)

forkx(2)

fpathconf(2)

fstat(2)

fstatat(2)

fstatvfs(2)

futimens(2)

futimesat(2)

getacct(2)

getcontext(2)

getdents(2)

getegid(2)

geteuid(2)

getgid(2)

getgroups(2)

getisax(2)

getitimer(2)

getlabel(2)

getmsg(2)

getpflags(2)

getpgid(2)

getpgrp(2)

getpid(2)

getpmsg(2)

getppid(2)

getppriv(2)

getprojid(2)

getrctl(2)

getrlimit(2)

getsid(2)

gettaskid(2)

getuid(2)

getustack(2)

ioctl(2)

issetugid(2)

kill(2)

lchown(2)

link(2)

linkat(2)

llseek(2)

lseek(2)

lstat(2)

_lwp_cond_broadcast(2)

_lwp_cond_reltimedwait(2)

_lwp_cond_signal(2)

_lwp_cond_timedwait(2)

_lwp_cond_wait(2)

_lwp_continue(2)

_lwp_info(2)

_lwp_kill(2)

_lwp_mutex_lock(2)

_lwp_mutex_trylock(2)

_lwp_mutex_unlock(2)

_lwp_self(2)

_lwp_sema_init(2)

_lwp_sema_post(2)

_lwp_sema_trywait(2)

_lwp_sema_wait(2)

_lwp_suspend(2)

memcntl(2)

meminfo(2)

mincore(2)

mkdir(2)

mkdirat(2)

mknod(2)

mknodat(2)

mmap(2)

mmapobj(2)

mount(2)

mprotect(2)

msgctl(2)

msgget(2)

msgids(2)

msgrcv(2)

msgsnap(2)

msgsnd(2)

munmap(2)

nice(2)

ntp_adjtime(2)

ntp_gettime(2)

open(2)

openat(2)

pathconf(2)

pause(2)

pcsample(2)

pipe(2)

poll(2)

p_online(2)

ppoll(2)

pread(2)

priocntl(2)

priocntlset(2)

processor_bind(2)

processor_info(2)

profil(2)

pset_assign(2)

pset_bind(2)

pset_create(2)

pset_destroy(2)

pset_getattr(2)

pset_info(2)

pset_list(2)

pset_setattr(2)

putacct(2)

putmsg(2)

putpmsg(2)

pwrite(2)

read(2)

readlink(2)

readlinkat(2)

readv(2)

rename(2)

renameat(2)

resolvepath(2)

rmdir(2)

sbrk(2)

semctl(2)

semget(2)

semids(2)

semop(2)

semtimedop(2)

setcontext(2)

setegid(2)

seteuid(2)

setgid(2)

setgroups(2)

setitimer(2)

setpflags(2)

setpgid(2)

setpgrp(2)

setppriv(2)

setrctl(2)

setregid(2)

setreuid(2)

setrlimit(2)

setsid(2)

settaskid(2)

setuid(2)

setustack(2)

shmadv(2)

shmat(2)

shmctl(2)

shmdt(2)

shmget(2)

shmids(2)

shmop(2)

sigaction(2)

sigaltstack(2)

sigpending(2)

sigprocmask(2)

sigsend(2)

sigsendset(2)

sigsuspend(2)

sigwait(2)

__sparc_utrap_install(2)

stat(2)

statvfs(2)

stime(2)

swapctl(2)

symlink(2)

symlinkat(2)

sync(2)

sysfs(2)

sysinfo(2)

time(2)

times(2)

uadmin(2)

ulimit(2)

umask(2)

umount(2)

umount2(2)

uname(2)

unlink(2)

unlinkat(2)

ustat(2)

utime(2)

utimensat(2)

utimes(2)

uucopy(2)

vfork(2)

vforkx(2)

vhangup(2)

waitid(2)

wracct(2)

write(2)

writev(2)

yield(2)

acl

, facl

- get or set a file's Access Control List (ACL)

Synopsis

#include <sys/acl.h>intacl(char *pathp,intcmd,intnentries,void *aclbufp);

intfacl(intfildes,intcmd,intnentries,void *aclbufp);

Description

Theacl() andfacl() functions get or set the ACL ofa file whose name is given bypathp or referenced by theopen file descriptorfildes. Thenentries argument specifies how many ACL entries fitinto bufferaclbufp. Theacl() function is used to manipulate ACL onfile system objects.

The following types are supported foraclbufp:

aclent_t

Used by the UFS file system.

ace_t

Used by the ZFS and NFSv4 file systems.

The following values forcmd are supported:

SETACL

nentriesaclent_t ACL entries, specified in bufferaclbufp, are stored in the file's ACL. All directories in the path name must be searchable.

GETACL

Bufferaclbufp is filled with the file'saclent_t ACL entries. Read access to the file is not required, but all directories in the path name must be searchable.

GETACLCNT

The number of entries in the file'saclent_t ACL is returned. Read access to the file is not required, but all directories in the path name must be searchable.

ACE_SETACL

nentriesace_t ACL entries, specified in bufferaclbufp, are stored in the file's ACL. All directories in the path name must be searchable. Write ACL access is required to change the file's ACL.

ACE_GETACL

Bufferaclbufp is filled with the file'sace_t ACL entries. Read access to the file is required and all directories in the path name must be searchable.

ACE_GETACLCNT

The number of entries in the file'sace_t ACL is returned. Read access to the file is required and all directories in the path name must be searchable.

Return Values

Upon successful completion,acl() andfacl() return0 ifcmd isSETACL orACE_SETACL. Ifcmd isGETACL,GETACLCNT,ACE_GETACL orACE_GETACLCNT,the number of ACL entries is returned. Otherwise,-1 is returnedanderrno is set to indicate the error.

Errors

Theacl() function will fail if:

EACCES

The caller does not have access to a component of the pathname.

EFAULT

Thepathp oraclbufp argument points to an illegal address.

EINVAL

Thecmd argument is notGETACL,SETACL,ACE_GETACL,GETACLCNT, orACE_GETACLCNT; thecmd argument isSETACL andnentries is less than 3; or thecmd argument isSETACL orACE_SETACL and the ACL specified inaclbufp is not valid.

EIO

A disk I/O error has occurred while storing or retrieving the ACL.

ENOENT

A component of the path does not exist.

ENOSPC

Thecmd argument isGETACL andnentries is less than the number of entries in the file's ACL, or thecmd argument isSETACL and there is insufficient space in the file system to store the ACL.

ENOSYS

Thecmd argument isSETACL orACE_SETACL and the file specified bypathp resides on a file system that does not support ACLs, or theacl() function is not supported by this implementation.

ENOTDIR

A component of the path specified bypathp is not a directory, or thecmd argument isSETACL orACE_SETACL and an attempt is made to set a default ACL on a file type other than a directory.

ENOTSUP

Thecmd argument isGETACL, but the ACL is composed oface_t entries, and the ACL cannot be translated intoaclent_t form.

Thecmd argument isACE_SETACL, but the underlying filesystem only supports ACLs composed ofaclent_t entries and the ACL could not be translated intoaclent_t form.

EPERM

The effective user ID does not match the owner of the file and the process does not have appropriate privilege.

EROFS

Thecmd argument isSETACL orACE_SETACL and the file specified bypathp resides on a file system that is mounted read-only.

Attributes

Seeattributes(5) for descriptions of the following attributes:

See Also

getfacl(1),setfacl(1),aclcheck(3SEC),aclsort(3SEC)