Computer How To How To, Tutorial, Example, Review


Extended ACLs in Solaris

April 16, 2011 by Computer

The ZFS file system in Solaris supports extended ACLs which an administrator can use for managing user and group control. One can control these extended ACLs using the chmod command. It is very similar to setfacl and getfacl in Linux. A common practice is to allow read and execute on subdirectories. This will be performed through inheritance on a parent directory. Here is an example:

chmod A+user:myusername:rx:file_inherit/dir_inherit:allow mydirectory

The above command in Solaris will add an extended ACL for user “myusername”, and each file written within “mydirectory” will inherit the ACL. This is useful if you want to give many people access to any subfiles written — normally to avoid permission conflicts.

One can also perform this for a group rather than a user:

chmod A+group:mygroup:rx:file_inherit/dir_inherit:allow mydirectory

This will set the ACL on directory “mydirectory” to group “mygroup”. And any file written within “mydirectory” will inherit the ACL on “mydirectory”

If for some reason you want to remove this ACL in you can perform the following:

chmod A-

One can even invoke this recursively to remove all inherited ACLs on subfiles and subfolders.

No comments yet.

RSS feed for comments on this post.

Leave a comment

The field of computers is very vast and can somtimes be extremely challenging, but also very rewarding. One will often times encounter problems that they may not have the answer to. Problems don't always have solutions, but sometimes they do. And helpting to provide some of those solutions is our mission. It is our goal to provide helpful computer how to, tutorial, example, and review for the benefit of everyone.

Some funny jokes...
"Dating a girl is just like writing software. Everything's going to work just fine in the testing lab (dating), but as soon as you have contract with a customer (marriage), then your program (life) is going to be facing new situations you never expected. You.ll be forced to patch the code (admit you're wrong) and then the code (wife) will just end up all bloated and unmaintainable in the end."

"Once upon a time there was a DOS user who saw Unix, and saw that it was good. After typing cp on his DOS machine at home, he downloaded GNU's unix tools ported to DOS and installed them. He rm'd, cp'd, and mv'd happily for many days, and upon finding elvis, he vi'd and was happy. After a long day at work (on a Unix box) he came home, started editing a file, and couldn't figure out why he couldn't suspend vi (w/ ctrl-z) to do a compile."

Terms and Disclaimer