Linux Access Control Lists library (libacl, -lacl).
SYNOPSIS
int
acl_set_file(const char *path_p, acl_type_t type, acl_t acl)
DESCRIPTION
The acl_set_file() function associates an access ACL with a file or di
rectory, or associates a default ACL with a directory. The pathname for
the file or directory is pointed to by the argument path_p.
The effective user ID of the process must match the owner of the file or
directory or the process must have the CAP_FOWNER capability for the re
quest to succeed.
The value of the argument type is used to indicate whether the access ACL
or the default ACL associated with path_p is being set. If the type pa
rameter is ACL_TYPE_ACCESS, the access ACL of path_p shall be set. If the
type parameter is ACL_TYPE_DEFAULT, the default ACL of path_p shall be
set. If the argument type specifies a type of ACL that cannot be associ
ated with path_p, then the function fails.
The acl parameter must reference a valid ACL according to the rules de
scribed on the acl_valid(3) manual page if the type parameter is
ACL_TYPE_ACCESS, and must either reference a valid ACL or an ACL with ze
ro ACL entries if the type parameter is ACL_TYPE_DEFAULT. If the acl pa
rameter references an empty ACL, then the acl_set_file() function removes
any default ACL associated with the directory referred to by the path_p
parameter.
RETURN VALUE
The acl_set_file() function returns the value 0 if successful; otherwise
the value -1 is returned and the global variable errno is set to indicate
the error.
ERRORS
If any of the following conditions occur, the acl_set_file() function re
turns -1 and sets errno to the corresponding value:
[EACCES] Search permission is denied for a component of the path
prefix or the object exists and the process does not have
appropriate access rights.
Argument type specifies a type of ACL that cannot be asso
ciated with path_p.
[EINVAL] The argument acl does not point to a valid ACL.
The ACL has more entries than the file referred to by
path_p can obtain.
The type parameter is not ACL_TYPE_ACCESS or ACL_TYPE_DE
FAULT.
The type parameter is ACL_TYPE_DEFAULT, but the file re
ferred to by path_p is not a directory.
cation resources.
[ENOTDIR] A component of the path prefix is not a directory.
[ENOTSUP] The file identified by path_p cannot be associated with the
ACL because the file system on which the file is located
does not support this.
[EPERM] The process does not have appropriate privilege to perform
the operation to set the ACL.
[EROFS] This function requires modification of a file system which
is currently read-only.
STANDARDS
IEEE Std 1003.1e draft 17 ("POSIX.1e", abandoned)
The behavior of acl_set_file() when the acl parameter refers to an empty
ACL and the type parameter is ACL_TYPE_DEFAULT is an extension in the
Linux implementation, in order that all values returned by acl_get_file()
can be passed to acl_set_file(). The POSIX.1e function for removing a
default ACL is acl_delete_def_file().
SEE ALSO
acl_delete_def_file(3), acl_get_file(3), acl_set_fd(3), acl_valid(3),
acl(5)
AUTHOR
Derived from the FreeBSD manual pages written by Robert N M Watson
<rwatson@FreeBSD.org>, and adapted for Linux by Andreas Gruenbacher
<a.gruenbacher@computer.org>.
Linux ACL March 23, 2002 2
Man(1) output converted with
man2html