getfacl

Wat het doet

Zo schrijf je het

getfacl [-aceEsRLPtpndvh] FILE...

Meest gebruikt

Niets past bij dit filter.

$ als gewone gebruiker# als root (of met sudo)

1. 1Show the ACL of a folder

   $getfacl /srv/sales
   # file: srv/sales
   # owner: root
   # group: sales
   # flags: -st
   user::rwx
   user:carol:r-x
   group::rwx
   group:account:r-x
   mask::rwx
   other::---
   default:user::rwx
   default:group::rwx
   default:group:account:r-x
   default:mask::rwx
   default:other::---

   flags -st = SGID and sticky; default lines are for new files.

2. 2See which files have an ACL

   $ls -l /srv/sales
   drwxrws--T+ 2 root sales 22 Oct 25 11:00 /srv/sales

   The + means an ACL.

3. 3Only the extra entries

   $getfacl -cs /srv/sales/*

   Skips files without ACL and the header.

4. 4Effective rights after the mask

   $getfacl /srv/sales/new.txt
   group:account:r-x		#effective:r--

   The mask removes x: account can only read.

5. 5Back up all ACLs of a tree

   #getfacl -R /srv > /root/srv-acl.txt

   Restore with setfacl --restore=/root/srv-acl.txt.

6. 6Only the default ACL

   $getfacl -d /srv/sales

   What new files will get.

7. 7Copy an ACL to another file

   $getfacl plan.txt | setfacl --set-file=- report.txt

   Same ACL on report.txt.

8. 8Numbers instead of names

   $getfacl -n /srv/restore

   Helps when users from another server do not exist here.

9. 9Audit folders with extra access (security)

   #getfacl -R -s -p /srv 2>/dev/null | grep -E '^(# file|user:|group:)'

   Lists who got extra rights beyond the normal mode.

10. 10Table view

    $getfacl -t /srv/sales

    Access and default in columns.

Niets past bij dit filter.

Exitcodes