acl权限（ACL permissions）.docVIP

acl权限（ACL permissions） Setfacl - set file access control list command 1:setfacl [-bkndRLPvh] [{-m|-x} acl_spec] [{-M|-X} acl_file] format file... The format of 2:setfacl --restore=file describe Used to set the acl. command in setfacl Options -m and -x followed the rules of acl. A plurality of ACL rules with a comma (,) separated. Option -M and -X used to read from a file or standard input ACL rules. Option --set and --set-file used to set the file or directory of the ACL rules, the previous set will be covered. Option -m (--modify and -M (--modify-file) option to modify the file or directory ACL rules. Option -x (--remove) and -C (--remove-file) option to remove the ACL rules. When using the -M -X option, reading the rules from the file, setfacl received getfacl command output format. When using the setfacl command in the file system does not support the ACLS, setfacl will modify the file permission bits. If the ACL rule does not exactly match the file permissions, setfacl will modify the file permissions to make the best possible reaction rules of ACL, and standard error error to send a message to return to a state of greater than 0. Jurisdiction Root is the only CAP_FOWNERr power users. option -b, --remove-all Delete all the extended ACL rules, the basic rules of ACL (the owner, group, other) will be retained. -k, --remove-default Delete the default ACL rules. -n, --no-mask You dont want to calculate the effective permissions. Setfacl ACL mask will be calculated by default, unless the mask is explicitly formulated. -mask To calculate the effective permissions, even if ACL mask is specified. -d, --default Set the default ACL rules. -restore=file Restore from backup ACL rules (these files can be generated by getfacl -R). Through this mechanism can restore the entire directory tree of the ACL rules. This parameter cannot be any parameters except --test and executed. --test Test mode does not change any file ACL rules, ACL rules will be listed after the operation. -R,