facl_set(3sec) [opensolaris man page]
acl_get(3SEC) File Access Control Library Functions acl_get(3SEC) NAME
acl_get, facl_get, acl_set, facl_set - get or set a file's Access Control List (ACL) SYNOPSIS
cc [ flag... ] file... -lsec [ library... ] #include <sys/acl.h> int *acl_get(const char *path, int flag, acl_t **aclp); int *facl_get(int fd, int flag, acl_t **aclp); int acl_set(const char *path, acl_t *aclp); int facl_set(int fd, acl_t *aclp); DESCRIPTION
The acl_get() and facl_get() functions retrieve an Access Control List (ACL) of a file whose name is given by path or referenced by the open file descriptor fd. The flag argument specifies whether a trivial ACL should be retrieved. When the flag argument is ACL_NO_TRIVIAL, only ACLs that are not trivial will be retrieved. The ACL is returned in the aclp argument. The acl_set() and facl_set() functions are used for setting an ACL of a file whose name is given by path or referenced by the open file descriptor fd. The aclp argument specifies the ACL to set. The acl_get() and acl_set() functions support multiple types of ACLs. When possible, the acl_set() function translates an ACL to the tar- get file's style of ACL. Currently this is only possible when translating from a POSIX-draft ACL such as on UFS to a file system that sup- ports NFSv4 ACL semantics such as ZFS or NFSv4. RETURN VALUES
Upon successful completion, acl_get() and facl_get() return 0 and aclp is non-NULL. The aclp argument can be NULL after successful comple- tion if the file had a trivial ACL and the flag argument was ACL_NO_TRIVIAL. Otherwise, -1 is returned and errno is set to indicate the error. Upon successful completion, acl_set() and facl_set() return 0. Otherwise, -1 is returned and errno is set to indicate the error. ERRORS
These functions will fail if: EACCES The caller does not have access to a component of path. EIO A disk I/O error has occured while retrieving the ACL. ENOENT A component of the path does not exist. ENOSYS The file system does not support ACLs. ENOTSUP The ACL supplied could not be translated to an NFSv4 ACL. ATTRIBUTES
See attributes(5) for descriptions of the following attributes: +-----------------------------+-----------------------------+ | ATTRIBUTE TYPE | ATTRIBUTE VALUE | +-----------------------------+-----------------------------+ |Interface Stability |Evolving | +-----------------------------+-----------------------------+ |MT-Level |MT-Safe | +-----------------------------+-----------------------------+ SEE ALSO
chmod(1), acl(2), acl(5), attributes(5) SunOS 5.11 6 Oct 2005 acl_get(3SEC)
Check Out this Related Man Page
ACL_GET(3) BSD Library Functions Manual ACL_GET(3) NAME
acl_get_fd, acl_get_fd_np, acl_get_file, acl_get_link_np -- get an ACL for a file LIBRARY
Standard C Library (libc, -lc) SYNOPSIS
#include <sys/types.h> #include <sys/acl.h> acl_t acl_get_fd(int fd); acl_t acl_get_fd_np(int fd, acl_type_t type); acl_t acl_get_file(const char *path_p, acl_type_t type); acl_t acl_get_link_np(const char *path_p, acl_type_t type); DESCRIPTION
The acl_get_fd(), acl_get_file(), acl_get_link_np(), and acl_get_fd_np() each allow the retrieval of an ACL from a file. The acl_get_fd() is a POSIX.1e call that allows the retrieval of an ACL of type ACL_TYPE_ACCESS from a file descriptor. The acl_get_fd_np() function is a non- portable form of acl_get_fd() that allows the retrieval of any type of ACL from a file descriptor. The acl_get_file() function is a POSIX.1e call that allows the retrieval of a specified type of ACL from a file by name; acl_get_link_np() is a non-portable variation on acl_get_file() which does not follow a symlink if the target of the call is a symlink. These functions may cause memory to be allocated. The caller should free any releasable memory, when the new ACL is no longer required, by calling acl_free(3) with the (void *)acl_t as an argument. The ACL in the working storage is an independent copy of the ACL associated with the object referred to by fd. The ACL in the working stor- age shall not participate in any access control decisions. RETURN VALUES
Upon successful completion, the function shall return a pointer to the ACL that was retrieved. Otherwise, a value of (acl_t)NULL shall be returned, and errno shall be set to indicate the error. ERRORS
If any of the following conditions occur, the acl_get_fd() function shall return a value of (acl_t)NULL and set errno to the corresponding value: [EACCES] Search permission is denied for a component of the path prefix, or the object exists and the process does not have appro- priate access rights. [EBADF] The fd argument is not a valid file descriptor. [EINVAL] The ACL type passed is invalid for this file object. [ENAMETOOLONG] A component of a pathname exceeded 255 characters, or an entire path name exceeded 1023 characters. [ENOENT] The named object does not exist, or the path_p argument points to an empty string. [ENOMEM] Insufficient memory available to fulfill request. [EOPNOTSUPP] The file system does not support ACL retrieval. SEE ALSO
acl(3), acl_free(3), acl_get(3), acl_set(3), posix1e(3) STANDARDS
POSIX.1e is described in IEEE POSIX.1e draft 17. AUTHORS
Michael Smith Robert N M Watson BSD
December 29, 2002 BSD